svelte-ai

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The remote MCP server URL https://mcp.svelte.dev/mcp is invoked at runtime by clients (e.g., configured as an HTTP MCP server or probed via curl) and provides live tools/prompts (including get-documentation, svelte-task and svelte-autofixer) that control the agent's instructions and perform remote analysis/execution.