alterlab-nf-core-sarek

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime invokes Nextflow to run the remote nf-core/sarek pipeline (nextflow run nf-core/sarek -r 3.8.1), which causes Nextflow to fetch and execute pipeline code from the nf-core/sarek release (e.g. https://nf-co.re/sarek/3.8.1/ / the nf-core GitHub repo), so this is a runtime external dependency that executes remote code.