generate-diffmap

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes npx @tanishqkancharla/diffmap to download and run package content from npm, which operates as an unverified third-party personal repository dependency without established official provenance, resulting in a high risk tier.