blog-figure

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes D3-based patterns that load and execute the remote script https://d3js.org/d3.v7.min.js at runtime (via in the HTML examples), and those patterns require that external code to render—so the URL is fetched and executes remote code during skill runtime.