voicemode-connect

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The MCP setup instructs running npx which will fetch and execute the remote mcp-remote package and connect to the runtime endpoint https://voicemode.dev/mcp (used at runtime to route/drive agent conversations), creating a required external dependency that can execute remote code and control prompts.