roboflow-product-navigation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly states that MCP resources at roboflow://skills/product-navigation/features-by-page (and roboflow://skills//...) may be read at runtime via ReadMcpResourceTool as a fallback and that this fetched skill content is the agent "source-of-truth", meaning it would directly control agent instructions.