baoyu-electron-extract

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill executes npx to dynamically fetch and run @electron/asar and prettier from the public npm registry at runtime, constituting an unpinned operational dependency from an external package transporter.