light-typesetting

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's README and script instruct running "npm install docx && node docx_template.js" (SKILL.md:43 and assets/docx_template.js:4-5), which will fetch and execute the npm package code resolved at https://registry.npmjs.org/docx/-/docx-9.7.1.tgz (assets/package-lock.json:28) as a required runtime dependency.