docker-data-environments

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains Dockerfile and compose steps that fetch and execute remote artifacts at build/run time—e.g., the Dockerfile curl to download Spark from "https://downloads.apache.org/spark/spark-${SPARK_VERSION}/spark-${SPARK_VERSION}-bin-hadoop${HADOOP_VERSION}.tgz", the jar downloads from "https://repo1.maven.org/...", the pip constraint fetch from "https://raw.githubusercontent.com/apache/airflow/constraints-…/constraints-….txt", and numerous container image pulls (e.g., postgres:16-alpine, minio/minio:RELEASE…, confluentinc images, ghcr.io/…, harbor.internal.corp/…) which are required runtime dependencies that cause remote code/artifacts to be executed or installed.