arcgis-scene-environment

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The example HTML loads and executes remote JavaScript at runtime from CDN URLs (https://js.arcgis.com/calcite-components/3.3.3/calcite.esm.js, https://js.arcgis.com/4.34/, https://js.arcgis.com/4.34/map-components/) which are required for the skill and therefore constitute runtime external code execution risk.