octocode-stats

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The generated dashboard template includes third-party JS that will be fetched and executed when the script auto-opens the HTML (e.g., https://cdn.jsdelivr.net/npm/apexcharts@3.45.0/dist/apexcharts.min.js, plus https://cdn.jsdelivr.net/npm/countup.js@2.8.0/dist/countUp.umd.min.js and https://unpkg.com/lucide@0.469.0/dist/umd/lucide.min.js), and the page relies on ApexCharts for rendering so those remote scripts execute code at runtime and are required for the skill's output.