dotnet-dev

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes explicit runtime calls (e.g., via mcporter/npx) to https://learn.microsoft.com/api/mcp to fetch Microsoft Learn content that would be injected into the agent's context and thus can directly control prompts/instructions.