web-artifacts-builder

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes runtime tags that load and execute external JavaScript (e.g., Chart.js from https://cdn.jsdelivr.net/npm/chart.js@4.4.0/dist/chart.umd.min.js), and the dashboard example directly depends on that CDN script at runtime to render charts, so the fetched content will execute remote code in the user's context.