sigma

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The Excalidraw HTML template in references/excalidraw.md loads and executes remote JS/CSS from esm.sh at runtime (e.g. https://esm.sh/@excalidraw/excalidraw@0.18.0/dist/dev/index.js and related https://esm.sh/... imports) to render diagrams, which means the skill fetches and executes external code as a required runtime dependency.