space-chart-html

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runs a runtime command that fetches and executes remote code—"npx getdesign@latest add " (npm package: https://www.npmjs.com/package/getdesign)—and then reads the generated DESIGN.md to drive styling tokens, so external content is executed and directly controls the skill's output.