dex-skill

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The bundled setup script fetches and installs a pre-built CLI binary at runtime from https://github.com/getdex/agent-skills/releases/latest/download/ (via curl -o ... and chmod +x / execution), so remote code is downloaded and executed as a required dependency.