touchdesigner-mcp

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The setup script explicitly downloads the required twozero.tox from the official 404zero.com URL at runtime, and that .tox is a required external component which, when loaded, executes code inside TouchDesigner and enables the MCP server the skill relies on (domain: 404zero.com), so it is a runtime fetch that can execute remote code.