earth2studio-create-prognostic

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to fetch a user-provided reference inference script at runtime (example: https://github.com/198808xc/Pangu-Weather) and the templates/prompts mandate resolving remote model packages like hf://organization/model-name@commit which are downloaded at runtime and may be loaded with torch.load (unpickling), meaning external URLs can directly control the agent's implementation and execute code.