workiq-preview

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires runtime calls to the hosted WorkIQ MCP endpoint https://workiq.svc.cloud.microsoft/mcp (in .mcp.json), which is invoked at runtime to execute agentic tools and perform remote actions on Microsoft 365, so this external URL is a required runtime dependency that executes remote operations.