opik

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The installer and docs include runtime commands that clone and run the upstream repo (git clone https://github.com/comet-ml/opik.git && ./opik.sh), which fetches remote code and then executes it (remote code execution during local server setup).