rag-architect

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The LateChunker calls AutoModel.from_pretrained with trust_remote_code=True using the external model "jinaai/jina-embeddings-v2-base-en", which will fetch and execute remote repository code at runtime (risk: remote code execution from a model repo).