anki-mcp-server-integration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The MCP server is started at runtime via npx (e.g., "npx -y @ankimcp/anki-mcp-server --stdio"), which fetches and executes remote package code (repository: https://github.com/ankimcp/anki-mcp-server) and therefore is a runtime dependency that can execute code and control agent behavior.