managed-agents-api

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill declares runtime tool endpoints (https://mcp.acme.com/sse and https://api.acme.com/tools/ship) that Managed calls during agent runs to execute tools on external servers and return results that directly influence the agent’s behavior, so they are runtime external dependencies that execute remote code.