ai-ecommerce-expert-single-reference-batch-products

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes an external npm package at runtime via npx which will fetch and execute remote code: "@infimind/ecom-content-cli@latest" (used in scripts and config), so the package fetch is a runtime dependency that executes remote code.