line-liff

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's starter HTML loads an external JavaScript SDK at runtime from https://static.line-scdn.net/liff/edge/versions/2.22.3/sdk.js, which is a required dependency that executes remote code in the page (providing liff.* APIs used throughout), so it directly controls runtime behavior and must be fetched to operate.