algolia-mcp

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill’s manual connection steps instruct running commands like “npx mcp-remote https://mcp.algolia.com/mcp …”, which will fetch and execute the remote mcp-remote package from the npm registry as a required bridge to the MCP server (https://mcp.algolia.com/mcp), i.e. remote code is fetched and executed at runtime.