perf-audit

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime workflow invokes npx commands (e.g., "npx vite-bundle-visualizer" and "npx webpack-bundle-analyzer"), which fetch and execute packages from the npm registry (https://registry.npmjs.org) and therefore constitute runtime external dependencies that execute remote code.