catlass-operator-code-gen

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references https://gitcode.com/cann/catlass.git as a runtime setup dependency to clone the Catlass repository when missing, but GitCode lacks official enterprise provenance and authenticating digests, placing it in the weak/unknown/suspicious provenance tier.