on-device-ai

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill sets ort.env.wasm.wasmPaths to https://cdn.jsdelivr.net/npm/onnxruntime-web/dist/, which is fetched at runtime to load WASM binaries (remote executable code) that the skill requires for ONNX inference, so a compromised or malicious CDN could execute code in users' browsers.