rag-blueprint

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs runtime authentication and image pulls from the external container registry host nvcr.io (e.g., "docker login nvcr.io ...") which is used at deploy time to fetch and run remote container images (executing remote code), so nvcr.io is flagged.