humanlayer-to-video

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The pipeline's generated index.html loads and executes remote JavaScript at render time (e.g., https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js and https://cdn.jsdelivr.net/npm/marked@12.0.0/marked.min.js), which are fetched during the skill's runtime and execute code the rendering relies on, creating a runtime dependency on external code.