malloy-html-data-app-embedding

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill loads and executes remote code at runtime from the publisher SDK and embedded page URLs (https://your-publisher/sdk/publisher.js and https://your-publisher/environments/demo/packages/sales/index.html), which are required runtime dependencies that run code in the host/iframe context.