earth2studio-create-diagnostic

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes packaged-model URLs that would be fetched at runtime and then loaded with torch.load(weights_only=False) — which can execute arbitrary pickle code — specifically: hf://nvidia/precip-estimator@0123456789abcdef0123456789abcdef01234567 and ngc://models/nvidia/modulus/super_resolution@v1.0 (also the Dockerfile clones https://github.com/NVIDIA/earth2studio.git during environment setup), so remote content fetched at runtime can execute code.