technical-blog-doc

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.95). The skill's deployment instructions include a runtime fetch-and-execute command that downloads and runs remote code (curl -fsSL https://ollama.com/install.sh | sh), meaning the https://ollama.com/install.sh URL is used at runtime to execute external code as a required installation step.