create-agent

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The agent spec includes a required container image that will be pulled and executed at runtime — pkg.harness.io/vrvdt5ius7uwygso8s0bia/harness-agents/harness-ai-agent:latest — meaning remote code is fetched and run as part of the skill.