gpt-image-2

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill directs running "pnpm dlx @pilio/cli gpt-image-2", which causes pnpm to fetch and execute the remote @pilio/cli package from the npm registry (e.g., https://registry.npmjs.org/@pilio/cli) at runtime, so remote code is retrieved and executed and is required for the skill to operate.