unifapi

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires contacting the hosted MCP server at https://mcp.unifapi.com (and related endpoints such as https://mcp.unifapi.com/.well-known/oauth-protected-resource and https://api.unifapi.com/openapi.json) at runtime to fetch operation metadata/OpenAPI schemas via list_operations/get_operation which directly drive which prompts/actions the agent issues, so this is a runtime external dependency that controls agent behavior.