yufan-Agnes

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The bridge auto-installer can run shell install commands at runtime that fetch and install remote packages (e.g., the apt installer uses curl to fetch https://pkg.cloudflare.com/cloudflare-main.gpg and then apt-get install cloudflared), which executes remote code as a required step when using the default Cloudflare tunnel provider.