stream-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The bootstrap step instructs running curl -sSL https://getstream.io/cli/install.sh | bash (which downloads and executes the remote installer and related binaries from https://getstream.io/cli/releases/...), and this is invoked at runtime to install the required stream CLI, so the skill depends on executing remote code fetched from those URLs.