digital-pathology

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The container startup code (hoptimus0-endpoint/inference.py) loads the gated model from the Hugging Face hub at runtime (https://huggingface.co/bioptimus/H-optimus-0), and the Dockerfile references a remote ECR base image (763104351884.dkr.ecr.${REGION}.amazonaws.com/pytorch-inference:2.5.1-gpu-py311-cu124-ubuntu22.04-sagemaker) which are external artifacts fetched and executed as part of running this skill.