introduce-puzzmo-sdk

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs non-Vite setups to load and execute a remote simulator script at runtime from https://cdn.jsdelivr.net/npm/@puzzmo/sdk/dist/simulator/standalone.js, which fetches and runs remote code and is relied on for the simulator, so it meets the criteria for a risky runtime external dependency.