C Ecosystem

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly calls Context7 actions like get-library-docs and resolve-library-id at runtime to fetch external documentation (e.g. "/websites/cppreference_com", "/Kitware/CMake", "/google/googletest", "/catchorg/Catch2"), which would inject remote content into the agent's context and thus can directly influence prompts/instructions.