tao-mine-aoi-images

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill resolves and docker-pulls the runtime image declared as tao_toolkit.data_services from versions.yaml (DS_IMAGE → e.g. an nvcr.io/... URI) and then executes it via docker run, so remote image content is fetched at runtime and executes code the skill requires.