pr-description-skill

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL mandates a runtime mermaid validation step that runs "npx --yes -p @mermaid-js/mermaid-cli mmdc", which pulls and executes the @mermaid-js/mermaid-cli package from the npm registry (e.g. https://www.npmjs.com/package/@mermaid-js/mermaid-cli) as a required dependency, so remote code is fetched and executed at skill runtime.