html-to-aippt-composition

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime includes running ensure-html-to-composition.mjs which may execute "npm install -g html-to-composition@latest" (fetching and installing remote code from the npm registry, e.g. registry.npmjs.org) and then invoking the installed CLI (aippt-html-import), so remote code is fetched and executed at runtime.