nlweb-mcp-server

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to fetch live files (notably the NLWeb repo docs and mcp_wrapper.py) such as https://github.com/nlweb-ai/NLWeb/blob/main/AskAgent/python/webserver/mcp_wrapper.py and https://github.com/nlweb-ai/NLWeb/blob/main/docs/nlweb-chatgpt-integration.md at runtime to obtain the exact JSON‑RPC method list and tool schemas that directly control how prompts/tools are generated, so these remote URLs are runtime dependencies that control the agent's behavior.