custom-skill-creator

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script uses an external unverified CDN (https://cdn.sheetjs.com/) to load runtime UI library code (xlsx.full.min.js) with an explicit subresource integrity hash, which qualifies as an inbound operational dependency with common/reputable unofficial provenance.