sinch-in-app-calling

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs including and loading the Sinch runtime SDK from the CDN at runtime (https://cdn.sinch.com/latest/sinch-rtc-min.js), which fetches and executes remote code in the client and is presented as a required integration dependency.