devops

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The Dockerfile pulls base images from mcr.microsoft.com (FROM mcr.microsoft.com/dotnet/sdk:8.0@sha256: and FROM mcr.microsoft.com/dotnet/aspnet:8.0-noble-chiseled@sha256:), which are remote artifacts fetched at build/runtime and contain executable code the skill depends on, so they constitute runtime external dependencies that execute remote code.