global-debt-fiscal-explorer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs runtime calls to the AgentPMT MCP endpoints (e.g., https://api.agentpmt.com/mcp/ via the "get_schema"/"get_instructions" tool calls and https://api.agentpmt.com/products/purchase for REST invokes) to fetch live schema and instructions which are treated as authoritative and thus directly control the agent's prompts and tool invocation.