syncfusion-javascript-pdf

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes CDN script URLs that are fetched and executed at runtime (e.g. https://cdn.syncfusion.com/ej2/dist/ej2.min.js and the versioned runtime scripts https://cdn.syncfusion.com/ej2/30.1.42/ej2-pdf/dist/global/ej2-pdf.min.js, https://cdn.syncfusion.com/ej2/30.1.42/ej2-pdf-data-extract/dist/global/ej2-pdf-data-extract.min.js), so remote code would run in the agent's runtime when the CDN option is used.