hyperframes-shorts

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the Agent to fetch and install remote packages at runtime (e.g., "npx skills add ztaihang/agent-skills@hyperframes-shorts" and multiple "npx skills add …" / "npx hyperframes skills update" commands), which will download and execute remote package code that the skill requires, so this is a runtime external dependency that can execute code.