framevideo-registry

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The demo.html template (used by the CI preview pipeline) includes an external script tag that will load and execute GSAP from https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js at runtime, so this URL pulls remote code that is executed as part of demo/preview rendering and is a required dependency for timeline-driven components.