tldraw-api

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill injects and executes a dynamic module import at runtime to discover and load the renderer entry (via script.src matched by //index-[^/]+.js$/ and then await import(src)), which fetches and executes remote module code and is required for file-bridge operations like new-file/openRecent/save.