syncfusion-aspnetcore-timepicker

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill loads runtime assets from the Syncfusion CDN (notably https://cdn.syncfusion.com/ej2/dist/ej2.min.js), which are fetched and executed in the user's page and are required for the TimePicker to function, so this is a runtime external script dependency that executes remote code.