phoenix-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The CLI fetches prompt text at runtime from the Phoenix API host configured via PHOENIX_HOST (e.g., http://localhost:6006) using commands like "px prompt get ", so remote content served from that URL can directly control agent prompts.