alpaca-broker-money-precision

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs agents at runtime to fetch live documentation from https://docs.alpaca.markets/llms.txt and https://docs.alpaca.markets/llms-full.txt (and to prefer a connected alpaca-docs MCP server) to drive schema/behavior before generating code that can mutate production state, so those URLs directly control agent prompts/behavior.