progressive-web-app

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill's Workbox example uses importScripts('https://storage.googleapis.com/workbox-cdn/releases/7.0.0/workbox-sw.js'), which would fetch and execute remote code at service-worker runtime (a runtime external dependency that runs code).