live2d-cubism-web-quickstart

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill fetches and instantiates a WebAssembly binary at runtime (fetch('cubism-core/CubismCore.wasm')), which is remote code executed by the app and is a required runtime dependency.