nemotron-super3

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill’s recipes specify runtime pulls of external container images and model artifacts (for example nvcr.io/nvidian/nemo:26.02.super.rc4 and HF model artifact nvidia/NVIDIA-Nemotron-3-Super-120B-A12B-BF16 and the GenRM initializer Qwen3-235B-A22B-Thinking-2507), which will be fetched and executed/used at runtime and can therefore run code or directly control prompt-judging behavior.