aws

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime shell commands that fetch and install remote executables/artifacts which are then executed or used (notably the Firecracker release download via curl to https://github.com/firecracker-microvm/firecracker/releases/download/${LATEST}/firecracker-...tgz piped to tar, and the CI kernel download from https://s3.amazonaws.com/spec.ccfc.min/${KEY}), so external content is fetched at runtime and directly results in executing remote code.