netdata-instrumentation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime curl downloads that fetch and execute remote code: the .NET auto-installer script (https://github.com/open-telemetry/opentelemetry-dotnet-instrumentation/releases/latest/download/otel-dotnet-auto-install.sh) is downloaded and sh'ed, and the Java agent jar (https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/latest/download/opentelemetry-javaagent.jar) is downloaded and used with -javaagent, meeting the criteria for executing external code at runtime.