marquee-loop
Warn
Audited by Snyk on Jul 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The demo's HTML loads and executes third-party JavaScript at runtime from https://cdn.tailwindcss.com, https://code.iconify.design/iconify-icon/1.0.7/iconify-icon.min.js, https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.2/gsap.min.js, and https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.2/ScrollTrigger.min.js (included as runtime_dependencies), which are remote scripts fetched and executed by the skill at runtime.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata