legal-element-analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The docs instruct runtime registration and direct HTTP calls to the remote MCP endpoint https://tlr.dr-lawbot.com/mcp (e.g., via claude mcp add ... https://tlr.dr-lawbot.com/mcp, npx mcp-remote https://tlr.dr-lawbot.com/mcp, and a curl probe), which the agent will call at runtime to fetch search bundles that directly influence allowed citations and agent behavior, and the skill requires that remote MCP for judgment anchoring—so this is a runtime external dependency that controls agent prompts/results.