ui-testing-harness

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The cloudflared step exposes your local MCP server at the runtime-generated URL https://.trycloudflare.com which you are instructed to register with external connectors (Claude/ChatGPT/M365), allowing those remote hosts to invoke tools or send structured content that can directly control agent prompts/behavior.