publish-html-report

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill embeds CDN-hosted scripts that are fetched and executed when the HTML report is rendered (https://cdn.tailwindcss.com, https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs) and uses htmlpreview.github.io (https://htmlpreview.github.io/?$RAW_URL) to load raw HTML — all are runtime dependencies that execute remote JavaScript and are required for the report to render.