consomme

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill injects remote JavaScript at runtime via the Chart.js CDN URLs (https://cdn.jsdelivr.net/npm/chart.js@4.4.7/dist/chart.umd.min.js and https://cdn.jsdelivr.net/npm/chartjs-adapter-date-fns@3.0.0/dist/chartjs-adapter-date-fns.bundle.min.js), which are fetched when the generated HTML dashboard is opened and thus execute remote code the skill relies on for rendering.