microsoft-graph-gateway

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Install-MsGraphRunner.ps1 helper downloads and unpacks an executable runner from https://github.com/merill/msgraph/releases/latest/download/msgraph.zip which the skill expects as its execution substrate and which will be executed by the gateway (Resolve-RunnerCommand / & $runnerCommand), so remote code is fetched and run at runtime.