gooey-blob-system

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The demo injects and loads runtime JavaScript libraries (e.g., GSAP and Iconify) during iframe srcdoc runtime from external CDN origins such as https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.2/gsap.min.js which will execute remote code in the demo environment.