motion-design-skill

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's install/invoke step uses "npx skills add LottieFiles/motion-design-skill", which will fetch and execute the remote package (upstream: https://github.com/lottiefiles/motion-design-skill), so external code is retrieved and run at runtime.