metabase-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly loads workflow content at runtime via the CLI command "mb skills get" (e.g., fetching the metabase/agent-skills / metabase/mb-cli content and the @metabase/cli package at https://www.npmjs.com/package/@metabase/cli), so remote content fetched during execution can directly control the agent's instructions.