cometchat-features

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires querying the CometChat docs MCP at runtime (installable via https://www.cometchat.com/docs/mcp), and that remote documentation is a hard-required dependency whose fetched content will be used to drive the agent's prompts/instructions for feature behavior—so it directly controls agent output.