depot-general

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill contains a direct runtime command that fetches and immediately executes remote code (curl -L https://depot.dev/install-cli.sh | sh), which runs external content as a required install-time dependency.