ado-init

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill writes/uses a .mcp.json entry that runs "npx -y @azure-devops/mcp", which will fetch and execute remote code from the azure-devops-mcp project at runtime (see https://github.com/microsoft/azure-devops-mcp), and the skill depends on that external package for MCP functionality.