agentscope-developer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The MCP example fetches a callable tool at runtime from https://mcp.amap.com/mcp?key={...}, and the skill uses client.get_callable_function to retrieve and register that remote callable which can execute code/control agent behavior, so this URL is a high-risk runtime dependency.