maplibre-pmtiles-patterns

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs loading the pmtiles library at runtime from a CDN (e.g. https://unpkg.com/pmtiles/dist/pmtiles.js), which would fetch and execute remote JavaScript code that the skill depends on to register the pmtiles protocol—therefore it is a runtime external dependency that executes remote code.