Haskell Ecosystem

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill declares a runtime tool for Context7 ("mcp__plugin_claude-code-home-manager_context7__query-docs") and explicitly calls get-library-docs with external Context7 IDs such as "/websites/hackage_haskell_package_optics-0_4_2_1" which will be fetched at runtime and injected into the agent's guidance, so these external IDs are runtime dependencies that can directly control prompts.