compute-env-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill runs pip install and other build steps at runtime that fetch and install remote packages (e.g., "git+https://github.com/bowang-lab/scGPT.git" and the wheel find_links at "https://data.pyg.org/whl/torch-2.7.0+cu126.html" / "https://data.pyg.org/whl/torch-2.4.0+cu124.html"), which executes remote code as required dependencies for the env builds.