html-reports

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill dynamically loads and executes remote JavaScript at runtime (thus running external code) — e.g. reports.js imports Mermaid from https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs, injects Prism assets from https://cdn.jsdelivr.net/npm/prismjs@1.29.0/... and the templates load Chart.js from https://cdn.jsdelivr.net/npm/chart.js@4.4.0/dist/chart.umd.min.js — these CDN URLs are fetched during report rendering and execute remote code.