astro-dev

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly instructs using the remote Astro Docs MCP at https://mcp.docs.astro.build/mcp (and WebFetch on docs URLs such as https://docs.astro.build/...) at runtime to fetch documentation that is injected into the agent's context to drive its decisions, so this is a runtime external dependency that directly controls prompts/instructions.