htmx-alpine

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes runtime script tags that load and execute remote JavaScript (Alpine focus plugin and HTMX SSE/WS extensions) such as https://cdn.jsdelivr.net/npm/@alpinejs/focus@3.x.x/dist/cdn.min.js and https://unpkg.com/htmx-ext-sse@2.2.2/sse.js which are fetched and executed at client runtime and are presented as required dependencies.