design-engineering

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly calls external MCP/APIs at runtime (for example the Figma MCP endpoint https://mcp.figma.com/mcp and Stitch site https://stitch.withgoogle.com) to fetch design artifacts/HTML/variables that are injected into the agent context and directly influence prompts and generated code.