azure-architecture-autopilot
Warn
Audited by Snyk on Apr 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly calls web_fetch at runtime to retrieve Microsoft Docs (for example https://learn.microsoft.com/en-us/azure/templates/microsoft.cognitiveservices/accounts and https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models) to determine API versions, SKUs and model availability which are required and directly drive Bicep generation and user prompts, so these external URLs are runtime dependencies that control agent behavior.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata