earth2studio-create-diagnostic

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). High-confidence risk: the skill's packaged-model loaders call load_default_package() that returns remote package URLs (hf://nvidia/precip-estimator@0123456789abcdef0123456789abcdef01234567 and ngc://models/nvidia/modulus/super_resolution@v1.0) which are resolved at runtime and their model.pt files are loaded with torch.load(..., weights_only=False) — loading remote pickled PyTorch objects can execute arbitrary code.