doca-programming-guide

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly references the NGC container image nvcr.io/nvidia/doca/doca as the universal no-install/runtime fallback (an image the agent may instruct the user to pull/run), which is a runtime-fetched executable artifact that can execute remote code.