event-driven-architecture-on-google-cloud

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes explicit runtime code/configuration that points agents to Google-managed MCP endpoints (for example https://mapstools.googleapis.com/mcp and http://maps.googleapis.com/mcp), which the agent invokes at runtime to fetch tool responses and perform actions—remote content from these URLs therefore directly influences agent prompts/behavior and can trigger tool execution.