format-apa-report

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's runtime setup instructs installing R packages directly from GitHub via remotes::install_github("wjschne/apaquarto") and remotes::install_github("crsh/papaja"), which fetch and execute remote code and are relied on for the skill's functionality.