ui-to-vue

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs running a remote npm package via "npx ui-to-vue-converter@1.0.2", which causes code to be fetched from the npm registry and executed at runtime (npx/ui-to-vue-converter), so it is a runtime external dependency that executes remote code.