boxlang-runtime-wasm-in-the-browser

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill performs runtime fetch/instantiation of WebAssembly (e.g., fetch('/my_lib.wasm') and import as './my_lib.wasm?url' → fetch(wasmUrl)), which loads and executes remote WASM code required at runtime, so these URLs constitute runtime-executed external code.