mi-note-export

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runs via "npx mi-note-export" which fetches and executes package code from the npm registry (e.g. https://registry.npmjs.org) and it auto-downloads Playwright's Chromium binary at runtime (e.g. https://playwright.azureedge.net), so external code/binaries are fetched and executed during runtime.