chart-visualization
Warn
Audited by Snyk on Aug 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill writes HTML that loads and executes remote JS libraries from CDNs (e.g., https://cdn.plot.ly/plotly-2.35.2.min.js and https://cdn.jsdelivr.net/npm/echarts@5.5.1/dist/echarts.min.js) at runtime to provide interactive charts, satisfying runtime fetch + remote code execution + required-dependency conditions.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata