openstreetmap-marker

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The generated HTML loads and executes remote frontend libraries at runtime (Leaflet JS/CSS and Font Awesome CSS) from https://unpkg.com/leaflet@1.9.4/dist/leaflet.js, https://unpkg.com/leaflet@1.9.4/dist/leaflet.css and https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css which are fetched during skill runtime and execute remote code in the browser.