app-platform-sandbox

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly maps runtime sandbox images to external registries (image "python" -> https://ghcr.io/bikramkgupta/sandbox-python and "node" -> https://ghcr.io/bikramkgupta/sandbox-node), which are fetched when creating sandboxes and will execute code inside those containers, so they are runtime external dependencies that can run remote code.