media-processing

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill invokes/auto-installs the rmbg CLI and documents that models are downloaded automatically at first use (and even includes an explicit model URL used in troubleshooting: https://unpkg.com/@rmbg/model-modnet/modnet-256.onnx and the project repo https://github.com/mrgoonie/rmbg), so runtime execution depends on fetching remote package/model content that will be executed/used locally.