marp-generator

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs running npx to fetch and execute the remote package @marp-team/marp-cli at export time (e.g., "npx --yes @marp-team/marp-cli@latest "$DECK/slides.md" --html -o "$DECK/slides.html""), which downloads and runs remote code required for the export step.