runpod

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires pulling and running remote Docker images from GHCR (e.g. ghcr.io/conalmullan/video-toolkit-qwen-edit:latest and other ghcr.io/conalmullan/video-toolkit-* images) which are fetched by RunPod at runtime and execute remote code, so these URLs constitute runtime external dependencies that run code.