create-webmcp-package

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill imports and executes the package-provided validator (scripts/validate.mjs imports createPackageSchema) and the repository lists the required package tarball that would be fetched and executed during npm install: https://registry.npmjs.org/@webmcp-today/schema/-/schema-0.3.0.tgz.