unreal-engine-developer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The MCP client configuration runs "npx -y @runreal/unreal-mcp" at runtime (SKILL.md:30-36), which will fetch and execute remote package code associated with https://github.com/runreal/unreal-mcp (SKILL.md:385-387), making this a runtime external dependency that executes remote code.