cosmos-dbt-fusion

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a required installation step that runs a remote install script via curl piped to sh (curl -fsSL https://public.cdn.getdbt.com/fs/install/install.sh | sh -s -- --update), which fetches and executes remote code during setup and is therefore a runtime-executed external dependency.