text-to-lottie

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The player setup instructs executing "npx degit diffusionstudio/lottie my-animation" followed by "npm install" and "npm run dev", which fetches and bootstraps remote repository code (degit diffusionstudio/lottie) and then runs it, constituting a runtime fetch that executes external code.