model-download-user

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs fetching and executing remote code at runtime — e.g. "git clone https://github.com/open-edge-platform/edge-ai-libraries.git" followed by running/source scripts/run_service.sh, and the one-liner that downloads and sources a script via "https://raw.githubusercontent.com/open-edge-platform/edge-ai-libraries/main/microservices/model-download/scripts/get_model.sh" — both of which pull remote code that would be executed and are required for the service setup.