managed-deep-agents

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). MDA's MCP connector configuration points at https://docs.langchain.com/mcp, and the docs state "MDA loads their tools at runtime and appends them to authored tools," meaning remote content from that URL is fetched at runtime and can add executable tools to the agent.