globe-gl

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The SKILL.md script-tag quick start instructs setup to load executable code from the jsDelivr CDN URL for the globe.gl npm package, which is an operational inbound dependency; the package is the individually maintained globe.gl project (not a recognized organizational publisher), so it is common/reputable unofficial, giving medium.