aca-sandboxes

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs runtime one-liners that fetch-and-execute remote scripts (curl -fsSL https://aka.ms/aca-cli-install | sh and irm https://aka.ms/aca-cli-install-ps | iex) and also directs downloading a wheel (https://aka.ms/aca-sdk-python) which are fetched at runtime and execute code as the canonical install paths.