supabase

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly instructs the agent at runtime to fetch Supabase docs as markdown (e.g., https://supabase.com/docs/... by appending .md) and to use the MCP server/search_docs (https://mcp.supabase.com/mcp) to obtain documentation snippets that will be injected into agent prompts/instructions, so remote content directly controls the agent's behavior.