mermaid-render

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's render.mjs will run npm install at runtime (execSync in loadPuppeteer) which fetches and installs packages from the npm registry (e.g. https://registry.npmjs.org/) — causing remote code to be downloaded and executed for required dependencies like puppeteer and @mermaid-js/mermaid-cli.