agency-threat-detection-engineer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The GitHub Actions CI steps install and run external packages (e.g., pip install sigma-cli which pulls code from PyPI at https://pypi.org) and use marketplace actions (e.g., actions/checkout@v4 → https://github.com/actions/checkout) during workflow runtime, which fetch and execute remote code the pipeline requires.