alibaba-wan-video

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL includes an explicit runtime fetch-and-execute sequence: "git clone https://github.com/Wan-Video/Wan2.2.git" (SKILL.md:538) followed by running python generate.py, so the GitHub URL fetches remote code that would be executed as a required dependency for the open-weight deployment.