opentelemetry-auto-instrumentation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's Java auto-instrumentation step runs a curl against https://api.github.com/repos/open-telemetry/opentelemetry-java-instrumentation/releases/latest (and then downloads the referenced opentelemetry-javaagent.jar release URL) at runtime to obtain a Java agent JAR that is attached via -javaagent (i.e., remote code fetched and executed) and is required for the instrumentation flow.