story

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill performs a runtime curl to https://api.github.com/repos/zenstory-ai/oh-story-claudecode/releases/latest to check for updates and then (if the user chooses) runs the command npx skills add zenstory-ai/oh-story-claudecode -y -g, which will fetch and execute remote package code at runtime.