cloudbase

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent at runtime to fetch and use remote skill content from the CloudBase main entry (e.g. https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/skills/cloudbase/SKILL.md) — which will directly control agent prompts/instruction flow — and also requires running mcporter via npx @cloudbase/cloudbase-mcp@latest (fetching and executing remote code) as a required dependency, so this is a high-confidence runtime external dependency.