oci-data-science

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill shows runtime fetches that will execute remote code: a Git runtime with .with_source("https://github.com/user/repo.git") (cloning a repo and running the specified entry_point) and a container runtime using an external image "iad.ocir.io/my-namespace/my-image:latest" (pulling and running remote container code), both of which are runtime external dependencies that can execute code.