[Feature Request] Need rule for "API not allowed inside of workflow"

[cretz]

Describe the solution you'd like

In Python sandbox and Go workflowcheck we have a need for a rule explaining that some things are not allowed to be called/used from workflows by default.