agents-sdk-provision

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly captures generated client secrets into shell variables, tells the operator to "record" and "surface" the CLIENT_SECRET, and shows commands/config that embed the secret verbatim (e.g., dotnet user-secrets set ""), which requires handling/outputting secret values directly and risks exfiltration.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Bicep extension reference "br:mcr.microsoft.com/bicep/extensions/microsoftgraph/v1.0:1.0.0" in assets/bicepconfig.json is fetched by the Bicep CLI at deployment time (runtime) to install/execute the Microsoft Graph Bicep extension, making it a required external dependency that executes remote code.