devtools-secrets

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime install commands that fetch and execute remote scripts (curl https://mise.run | sh and curl -1sLf 'https://dl.infisical.com/get-cli.sh' | bash), which would execute remote code and are presented as required installs for the toolchain, so they pose a runtime-execution risk.