basic-app-build

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's chart apps explicitly load and execute remote JavaScript at runtime (e.g., https://unpkg.com/ryuu.js and importmap entries pointing to https://esm.sh/... for react/react-dom/recharts), which are required dependencies for the apps and thus fetch and execute external code at runtime.