threejs-agents-model-optimizer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill configures runtime WASM decoders that are fetched and executed from external hosts (e.g., DRACOLoader.setDecoderPath('https://www.gstatic.com/draco/versioned/decoders/1.5.6/') and KTX2Loader.setTranscoderPath('https://cdn.jsdelivr.net/npm/three@0.160.0/examples/jsm/libs/basis/')), which are required at runtime to decode compressed assets and therefore involve executing remote code.