tanstack-ai-sandbox

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workspace/sandbox configuration clones remote git repos at runtime (e.g. "https://github.com/owner/repo") and those checked-out artifacts (and referenced repos like "owner/private-skills" and "owner/app") are bootstrapped/executed inside the sandbox (setup scripts, tests, agent runs), so remote content can cause code to be executed in-run.