text-to-lottie

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's setup step tells users to run "npx degit diffusionstudio/lottie" (fetching and cloning the remote repo at https://github.com/diffusionstudio/lottie) and then run npm install / npm run dev, which retrieves and executes remote code during runtime, so this is a required external dependency that executes code.