gws

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Claude MCP configuration runs remote code via npx for the @googleworkspace/cli package (which is published from https://github.com/googleworkspace/cli and its npm package), so at runtime external code is fetched and executed to expose MCP tools that directly control the agent.