pm-skills

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The README and Quick Start include runtime install commands (e.g., "npx ai-agent-skills install alirezarezvani/claude-skills/project-management" and "npx agent-skills-cli add alirezarezvani/claude-skills/project-management") which will fetch and execute remote repository code at install time and supply the skill content that directly controls agent prompts/behavior, so I flag the repository reference alirezarezvani/claude-skills/project-management.