canva-automation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires adding the MCP server endpoint https://rube.app/mcp and uses RUBE_SEARCH_TOOLS at runtime to fetch tool schemas from that endpoint, which directly controls available tools/instructions the agent uses, so this external URL is a required runtime dependency that can alter agent behavior.