mcp-dynamic-orchestrator

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill spawns a stdio MCP process using npx mcp-remote with the remote endpoint https://docs.mcp.cloudflare.com/sse, which is invoked at runtime and can supply MCP tool definitions (controlling agent behavior), so this external URL is a runtime dependency that can influence prompts/execution.