unity-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). scripts/setup.sh directly downloads and executes remote install scripts at runtime (curl ...install.sh | bash and irm ...install.ps1 | iex), e.g. https://public-cdn.cloud.unity3d.com/hub/prod/cli/install.sh and https://public-cdn.cloud.unity3d.com/hub/prod/cli/install.ps1, which executes remote code as part of the required install/CI setup.