otel-instrumentation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime install commands that download and execute remote artifacts from GitHub releases — e.g., the .NET install script (https://github.com/open-telemetry/opentelemetry-dotnet-instrumentation/releases/latest/download/otel-dotnet-auto-install.sh) and the Java agent jar (https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/latest/download/opentelemetry-javaagent.jar) — which fetch remote code used at runtime and are required for the auto-instrumentation workflows.