grow-business

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs running "npx skills add wondelai/skills --all --global" and "npx skills add wondelai/skills/ --global" at runtime to fetch/install remote npm packages that can execute remote code and supply the invoked skills which control agent prompts and behavior.