guizang-ppt-skill

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill's templates include runtime loading of external JS/CSS that will be fetched and executed in the browser (e.g., lucide icons: https://unpkg.com/lucide@latest/dist/umd/lucide.min.js, Motion One fallback: https://cdn.jsdelivr.net/npm/motion@11.11.17/+esm, MapLibre: https://unpkg.com/maplibre-gl@5.14.0/dist/maplibre-gl.js and its CSS, and OSM tiles: https://tile.openstreetmap.org/{z}/{x}/{y}.png), so these URLs are runtime external dependencies that execute remote code in the generated HTML.