workos-api-admin-portal

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). This skill explicitly instructs the agent at runtime to "WebFetch the relevant docs" (e.g. https://workos.com/docs/reference/admin-portal), meaning external content fetched during execution can change or control the agent's instructions—making it a required runtime dependency that can alter prompts.