make-textbook-figure

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill's HTML template and export guide load and execute remote JavaScript from CDNs—specifically https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-svg.js and https://cdn.jsdelivr.net/npm/html-to-image@1.11.11/dist/html-to-image.min.js—at runtime to render LaTeX and produce PNGs, so these external scripts are required and execute remote code in the user's environment.