mastergo-magic-skill

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly passes MasterGo prototyping URLs (e.g., https://mastergo.com/prototyping/190126391371865?fileOpenFrom=home&page_id=7%3A69&layer_id=7%3A70) as the required "shortLink" at runtime to mcp__C2d/mcp__getD2c calls so remote design content is fetched and injected into the agent's generation context, meaning the external URL is a runtime dependency that can directly influence prompts/output.