Check

Live definition vs the last anchored hash.

What you can paste

a remote MCP server URL, e.g. https://example.com/mcp (HTTPS only; we call tools/list without logging in)
npm:package-name or pypi:package-name (registry metadata only: version, integrity, maintainers)
a GitHub SKILL.md link (read as text)

We never run what we fetch. Private and local addresses are refused.