design-html

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The script fetches and executes a remote installer during runtime: the setup step uses curl -fsSL "https://bun.sh/install" to download and then runs it with bash, which is a required runtime action when bun is missing.