ms-teams-apps

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The RAG code calls the Azure Search service at the runtime endpoint specified by AZURE_SEARCH_ENDPOINT (e.g., https://your-search.search.windows.net) and directly injects the fetched documents into the Claude prompt/context, so remote content fetched at runtime can control agent instructions.