External web content dependency risk

Last updated Oct 17, 2026 Policies Access & Sharing

AI summary

Rencore Governance identifies Copilot agents depending on public websites for knowledge, which pose reliability risks since external content can change or become unavailable. Assess whether these sources are critical and consider caching important content internally or establishing fallback knowledge sources instead.

Severity: Medium External Access Recommended Generally available

What it detects

Identifies agents relying on public websites as knowledge sources, creating reliability and content control risks.

Why it matters

Evaluate and mitigate risks from agents dependent on external websites as knowledge sources, since public web content can change without notice, become unavailable, or contain inaccurate information that compromises agent reliability. Assess the criticality of external sources and consider caching essential content internally, implement validation mechanisms to verify content accuracy, establish fallback knowledge sources for business-critical information.

The rule

Every Copilot Agent that has any Knowledge where Type equals 'Public website'

In Rencore Governance

Details

Applies to	Copilot agent
Connector	Copilot Studio
Severity	Medium
Category	External Access
Recommended	Yes
Recommended automation	None
License type	Standard

Other policies that check Copilot agent objects:

Resource Groups with too many services (High)
Autonomous Copilot agent risk (Medium)
Autonomous Copilot agent with scheduled trigger (High)
Orphaned Copilot agent ownership gap (Medium)
Stale unpublished Copilot agents - 30 days (Medium)
Unauthenticated public agent security risk (High)
Unused agent cleanup candidate - 90 days (Medium)

Frequently asked questions

What does the external web content dependency risk policy detect?

The External web content dependency risk policy identifies agents relying on public websites as knowledge sources, creating reliability and content control risks.

Which objects does the external web content dependency risk policy check?

The External web content dependency risk policy checks Copilot agent objects from the Copilot Studio inventory and reports each one that matches its rule as a violation.

How severe is a violation of the external web content dependency risk policy?

Violations of the External web content dependency risk policy have Medium severity. The policy is in the External Access category.

Which module includes the external web content dependency risk policy?

The External web content dependency risk policy comes with the Copilot Studio connector in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.

Was this page helpful?