video-asset-reels

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The HTML composition loads and executes remote JS from the GSAP CDN at https://cdn.jsdelivr.net/npm/gsap@3/dist/gsap.min.js during rendering, and the renderer (scripts/render-frames.mjs) explicitly waits for window.gsap and relies on it to drive the timeline, so this external URL is a runtime dependency that executes remote code.