figma-make-extractor

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The installation instructs cloning and running code from the remote repo (git clone https://github.com/albertsikkema/figma-make-extractor.git followed by ./run-all.sh), so the GitHub URL is fetched at runtime and its fetched code is executed—making it a required runtime external dependency that executes remote code.