documentation-lookup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill calls Context7 at runtime using the URL https://mcp.context7.com/mcp/oauth to fetch documentation that is injected into the agent's context and directly drives the agent's responses, making it a required external source that controls prompts.