drawio

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill auto-installs and runs the MCP server at runtime via npx --yes @next-ai-drawio/mcp-server@0.1.15 (package: https://www.npmjs.com/package/@next-ai-drawio/mcp-server), which fetches and executes remote code that the skill requires to operate.