ebook-analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). Yes — several scripts fetch and execute remote modules at runtime (e.g., kb-generate-index.ts imports Deno std modules from https://deno.land/std@0.208.0/fs/walk.ts and https://deno.land/std@0.208.0/path/mod.ts, and calibre-db.ts relies on an external runtime package spec "jsr:@db/sqlite@0.12"), which are required external code fetched and executed when the skill runs.