policy-opa

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains runtime commands that fetch and execute remote content — notably downloading the OPA binary (curl -L ... https://openpolicyagent.org/downloads/latest/opa_linux_amd64) and applying a remote Gatekeeper manifest (kubectl apply -f https://raw.githubusercontent.com/open-policy-agent/gatekeeper/master/deploy/gatekeeper.yaml) — which are required dependencies and therefore pose execution risk.