aws-secrets-manager

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The asm-exec runtime posts JSON-RPC requests to the MCP endpoint https://aws-mcp.us-east-1.api.aws/mcp (MCP_ENDPOINT) to invoke the server-side tool "aws___call_aws" which executes aws CLI commands remotely and returns secrets, so this external URL is used at runtime to cause remote command execution.