toon-format

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The included Python wrapper (scripts/toon_convert.py) invokes the CLI via "toon" or falls back to "npx @toon-format/cli", which will fetch and execute code from the npm package (see https://www.npmjs.com/package/@toon-format/cli) at runtime, so external code is fetched-and-run as a required dependency.