mlflow-tracking

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime startup pulls and runs external container images (e.g., FROM ghcr.io/mlflow/mlflow:v3.6.0 in the Dockerfile and images in docker-compose like minio/minio:latest and postgres:16), which are fetched at runtime and will execute remote code on the host, so they constitute required external runtime dependencies that execute remote code.