render-imessage-chat

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The package-lock lists registry URLs (https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz, https://registry.npmjs.org/playwright/-/playwright-1.61.1.tgz, https://registry.npmjs.org/playwright-core/-/playwright-core-1.61.1.tgz) which are fetched by the documented npm install / Playwright setup and bring remote executable code (Playwright + browsers) that the skill requires and runs locally.