migrate-oxlint

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the user to run "npx @oxlint/migrate" which will fetch and execute remote package code tied to the referenced repository https://github.com/oxc-project/oxlint-migrate at runtime, so this external URL corresponds to a required runtime dependency that executes remote code.