remotion-to-framevideo

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The fv-src HTML includes a runtime script tag loading and executing GSAP from the CDN (https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js), which is fetched at render/runtime and is required for the composition timeline to run, so it is a runtime external dependency that executes remote code.