deploy-to-connect

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime install step that sets P3M to "https://packagemanager.posit.co/cran/__linux__/$(. /etc/os-release && echo "$VERSION_CODENAME")/latest" and runs install.packages("rsconnect", ...), which fetches and executes remote code at runtime (with fallback to https://cloud.r-project.org).