tradingview-mcp-assistant

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs cloning and installing https://github.com/tradesdontlie/tradingview-mcp and then configuring Claude to run node /path/to/tradingview-mcp/src/server.js, so runtime depends on and executes externally fetched code from that GitHub repo which directly controls the agent's MCP behavior.