mastra

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). This skill explicitly instructs runtime fetching of remote documentation (e.g., via WebFetch to https://mastra.ai/llms.txt and related https://mastra.ai/... .md URLs) and uses that fetched markdown to drive agent-facing prompts/instructions when embedded docs are unavailable, so the external URL directly controls agent behavior at runtime.