micro-interaction

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs loading React + "motion" from the esm.sh CDN into an inline module (e.g., import from https://esm.sh/...), which causes the browser to fetch and execute remote JavaScript at runtime, so the esm.sh URL is a runtime dependency that executes external code.