paper-2-web

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's Quick Start explicitly instructs cloning and installing code from the GitHub repository https://github.com/YuhangChen1/Paper2All (git clone ... then running python pipeline_all.py), meaning remote code is fetched and executed and thus can directly control prompts/behavior.