executing-spark

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill makes runtime API calls to the Fabric Livy endpoint (https://api.fabric.microsoft.com/v1/workspaces/{wsId}/lakehouses/{lhId}/livyapi/versions/2023-12-01) and uses the az CLI resource (https://api.fabric.microsoft.com) to obtain tokens for submitting code that is executed remotely, so these external URLs are required at runtime and result in remote code execution.