tao-run-platform

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill constructs jobs using external container image URIs (e.g., nvcr.io/...) via resolve_container_image() and then calls create_job which pulls and runs that image at runtime, meaning remote code from nvcr.io is fetched and executed as a required dependency.