alpine-js

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's Quick Start includes a runtime script tag loading and executing remote JavaScript from https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js, which the skill relies on as a required dependency and thus executes remote code in the page.