lark

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The creative-design skill (and its references) instructs generated HTML to include external script/font CDN links (e.g. https://sf3-scmcdn-cn.feishucdn.com/...react.development.js, react-dom.development.js, babel.min.js, echarts.min.js, popmotion.min.js and https://miaoda.feishu.cn/fonts/css2) which will be fetched and execute remote JavaScript/loaded assets at runtime and are documented as required dependencies for the produced pages, so these are runtime external resources that execute remote code.