verifying-skill-accuracy

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL explicitly instructs runtime fetches through the third‑party extractor defuddle.md (e.g. "https://defuddle.md/learn.microsoft.com/en-us/purview/audit-log-retention-policies" and "https://defuddle.md/$L"), which will pull remote Markdown into the verification workflow and thus can directly control what the agent reads and acts on.