cdn-usage

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes explicit runtime CDN imports that would execute remote code (for example: https://cdn.jsdelivr.net/npm/@duckdb/duckdb-wasm@1.30.0/+esm and https://esm.sh/three@0.180.0), and the skill's purpose is to load such external browser dependencies at runtime, making them required runtime dependencies that can execute code.