drawio-architecture

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires running the draw.io MCP at runtime (e.g., via "npx -y @drawio/mcp") and also documents using the hosted MCP endpoint https://mcp.draw.io/mcp, both of which involve contacting/executing remote code that the agent relies on to open and control diagrams.