tao-run-on-local-docker

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly installs Python packages at runtime (python -m pip install "$PIN", which fetches from PyPI) and pulls/runs container images such as nvcr.io/nvidia/tao/tao-toolkit:6.26.3-pyt, both of which fetch and execute remote code during runtime and are required for Mode 2 operation (flagging nvcr.io and PyPI usage).