tixmd-new

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes "pnpx @tixmd/cli" at runtime (package: https://www.npmjs.com/package/@tixmd/cli), which will fetch and execute remote npm package code required to list and create tickets, so remote code is executed as a required dependency.