create-command

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a Dynamic Specification Fetching pattern that instructs the agent at runtime to WebFetch https://raw.githubusercontent.com/modelcontextprotocol/typescript-sdk/main/README.md and "base all your function signatures and schemas on this dynamically fetched document", meaning a remote URL is fetched during execution and directly controls prompt/context.