demo-builder

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The HTML importmap loads Three.js modules at runtime from https://cdn.jsdelivr.net/npm/three@0.160.0/build/three.module.js and https://cdn.jsdelivr.net/npm/three@0.160.0/examples/jsm/, which are required runtime dependencies that execute remote code in the page.