kestra

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent at runtime to fetch the live flow schema via "curl -s https://api.kestra.io/v1/plugins/schemas/flow" and to add/use the Kestra MCP server at "https://api.kestra.io/v1/mcp", both of which return external content that will directly control prompt/context for flow generation and validation.