diffdock

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs to git clone https://github.com/gcorso/DiffDock.git (SKILL.md:27) and later executes code from that cloned repo (subprocess.run calling inference.py with cwd="DiffDock/" at SKILL.md:115 and SKILL.md:122), so remote code is fetched and then executed locally.