workos-integrations

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent at runtime to "WebFetch" provider-specific documentation URLs (e.g., https://workos.com/docs/integrations/google-saml) and then "follow the protocol" from the fetched content, so those external docs would directly control agent instructions and are required at runtime.