i4h-workflow-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The setup instructions include a runtime git clone of remote code (git clone https://github.com/isaac-for-healthcare/i4h-workflows) which fetches repository content that may be executed (e.g., setup.sh), so the URL is a runtime external dependency that can control executed code.