bwa-mem2-dna-aligner

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes a runtime install step that uses wget to fetch and extract a precompiled executable which will be run as a required dependency (https://github.com/bwa-mem2/bwa-mem2/releases/download/v2.2.1/bwa-mem2-2.2.1_x64-linux.tar.bz2), meaning remote code is downloaded and executed.