svg-assembly-animator

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The HTML template includes runtime script tags that fetch and execute remote JavaScript (https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.2/gsap.min.js and https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/jszip.min.js), and those libraries are required for the skill's animation and export functionality, so they constitute runtime external dependencies that execute remote code.