lovable-to-nextjs

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The guide explicitly instructs running external installers that fetch and execute remote code at runtime — e.g. "npx shadcn@latest init -y --defaults", "yarn create next-app <...>" and the GitHub Actions steps like "uses: actions/checkout@v4" / "uses: actions/setup-node@v4" which pull and run remote action code — and these are required steps for the conversion.