tao-train-oneformer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The docs include explicit runtime docker commands that pull and run the container image nvcr.io/nvidia/tao/tao-toolkit:6.26.3-deploy (shown in references/tao-deploy-oneformer.md), which fetches remote code and executes it for deploy/gen_trt_engine/evaluate/inference, so it is a runtime external dependency that executes remote code.