tao-train-dino

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill documentation includes explicit runtime Docker images pulled and executed from an external registry (e.g., nvcr.io/nvidia/tao/tao-toolkit:6.26.3-deploy shown in references/tao-deploy-dino.md and via the skill's container_image fields), which are fetched at runtime and execute remote code.