threejs-ops

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). Yes — the skill's no-bundler importmap and loader wiring point the runtime to CDN-hosted JS/WASM (e.g. https://cdn.jsdelivr.net/npm/three@0.185.1/build/three.module.js, https://cdn.jsdelivr.net/npm/three@0.185.1/examples/jsm/, https://www.gstatic.com/draco/versioned/decoders/1.5.7/, https://cdn.jsdelivr.net/npm/three@0.185.1/examples/jsm/libs/basis/) which the browser will fetch and execute at runtime (modules and WASM transcoders/decoders), making them required runtime external code execution dependencies.