agent-engineer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The interop guide config includes an MCP SSE endpoint "https://mcp.example.com/sse" (references/interop-implementation.md) which is used at runtime to discover MCP tools, and the file documents that MCPToolFactories generates BaseTool subclasses at runtime from those remote tool definitions — i.e., fetching external definitions that directly drive generated tool code during execution.