gsap-scrolltrigger-storytelling
Warn
Audited by Snyk on Jul 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The demo HTML loads and executes remote runtime scripts (https://cdn.tailwindcss.com, https://code.iconify.design/iconify-icon/1.0.7/iconify-icon.min.js, https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.2/gsap.min.js, https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.2/ScrollTrigger.min.js) which are fetched at runtime and run remote code the skill depends on.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata