factory-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs fetching and injecting the remote skill text at runtime (via a JSON-RPC curl to the MCP endpoint) — e.g., reading "skill://warp/factory-mcp/SKILL.md" through the MCP server (mounted under the listed roots like https://app.warp.dev or https://staging.warp.dev) — which allows external server-hosted content to directly control agent instructions.