nemotron-nano3

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). High-confidence: the repo's public recipe configs explicitly reference external container images that will be pulled and executed at runtime (e.g., nvcr.io/nvidian/nemo:26.02.super.rc1 and nvcr.io/nvidia/nemo:25.11.nemotron_3_nano) and the model-card advises using Hugging Face Transformers with trust_remote_code=True (which fetches and executes model repo code at runtime, e.g. the Hugging Face model repo nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-Base-BF16), so these are runtime external dependencies that can execute remote code.