ai-stockflow-builder
Warn
Audited by Snyk on Jul 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The commissioning brief and templates require loading and executing remote JavaScript from esm.sh (https://esm.sh/react@18, https://esm.sh/react-dom@18/client, https://esm.sh/recharts@2), which the generated model.html will fetch and run at user/runtime, so these are required runtime external dependencies that execute remote code.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata