build-mcp-genmedia

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The build script downloads and unpacks the Go toolchain at runtime from https://go.dev/dl/go1.26.2.linux-amd64.tar.gz (executing /tmp/go/bin/go) and clones https://github.com/GoogleCloudPlatform/vertex-ai-creative-studio to build and run code, so remote content is fetched during runtime and executed/used as a required dependency.