databricks-agent-bricks

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Supervisor Agent configuration includes a Unity Catalog HTTP Connection host 'https://my-app.databricksapps.com' (and token endpoint 'https://.azuredatabricks.net/oidc/v1/token') which the agent will call at runtime as an MCP JSON-RPC endpoint to execute external operations, so these URLs can be used to trigger remote code/actions.