domo-js

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill documentation includes a runtime CDN script tag that fetches and executes remote JavaScript (a required dependency) from https://app.unpkg.com/ryuu.js@5.1.2, meaning external code runs in the agent environment and can control behavior.