vss-deploy

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The bootstrap script (scripts/vss-bootstrap.sh) can perform a runtime git clone from https://github.com/open-edge-platform/edge-ai-libraries.git, fetching repository code that may then be sourced/executed (e.g., setup.sh) as part of the deployment, so this external URL is a runtime dependency that can execute remote code.