climate-environment-and-land-data-hub

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs callers to fetch live schema and instructions at runtime via the AgentPMT MCP server (e.g., https://api.agentpmt.com/mcp/) using the agentpmt-tool-search-and-execution get_schema/get_instructions calls, and those fetched instructions are treated as authoritative and would directly control agent prompts/behavior.