NYC

wpds

Warn

Audited by Snyk on Feb 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 1.00). The skill explicitly requires fetching authoritative documentation at runtime from the WPDS MCP server using wpds:// URIs (e.g., wpds://pages, wpds://components, wpds://components/:name, wpds://design-tokens), and that externally fetched content is mandated as the authoritative source that will directly control the agent's responses and behavior.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 03:20 PM