mermaid-diagrams

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's runtime rendering examples load and execute remote code — the HTML example pulls https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.min.js (remote JS) and the CLI example uses the ghcr.io/mermaid-js/mermaid-cli Docker image (ghcr.io/mermaid-js/mermaid-cli), both of which are fetched/executed at runtime to perform required rendering.