guizang-ppt-skill
Warn
Audited by Snyk on Aug 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill loads and executes remote JavaScript at runtime (icons/animation) — e.g. lucide via "https://unpkg.com/lucide@latest/dist/umd/lucide.min.js" and Motion One via "https://cdn.jsdelivr.net/npm/motion@11.11.17/+esm" — which are fetched by the template at deck/view time and thus constitute runtime remote code execution dependencies.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata