legal-article-retrieval

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires a runtime connection to the 北大法宝 MCP service (e.g., https://apim-gw.pkulaw.com/{SERVICE_ID}/mcp and https://mcp.pkulaw.com) to fetch structured legal text that is injected into the agent's context as the authoritative input for generating prompts and reports, so the external URL is used at runtime, its content directly controls the agent's outputs, and the skill depends on it.