cerbos-policy

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime validation and REPL steps invoke Docker images hosted on GHCR (ghcr.io/cerbos/cerbos:latest and ghcr.io/cerbos/cerbosctl:latest), which are remote container images pulled and executed at runtime and are required for the skill's validation workflow.