ffmpeg-usage

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's installer and README explicitly fetch and run remote code at runtime (git clone https://github.com/ychoi-kr/claude-ffmpeg-skill.git and the suggested curl https://raw.githubusercontent.com/ychoi-kr/claude-ffmpeg-skill/main/install.sh | bash), which downloads SKILL.md and other files that directly control the agent's prompts/behavior and may execute code during installation.