igniteui-blazor-theming

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill mandates runtime calls to the Ignite UI Theming MCP server (e.g., read_resource on theming://platforms/blazor) and requires auto-configuring/starting that server using "npx -y igniteui-theming igniteui-theming-mcp", which fetches and executes external code whose responses directly control the agent's theming prompts and outputs.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly requires the agent to automatically configure, write files for, start, and wait for an MCP server on the host (not asking the user to do it), which forces the agent to modify the machine's state and potentially perform privileged or persistent system changes.