preview-md

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill's generated preview page loads and executes third-party scripts at runtime from CDNs (e.g. https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs and https://cdnjs.cloudflare.com/ajax/libs/marked/12.0.1/marked.min.js), which are fetched by the browser and are required for rendering features—constituting execution of remote code during skill runtime.