nemoclaw-user-deploy-remote

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill's onboarding/build workflow (Dockerfile example and onboarding steps) pulls and uses the remote container image ghcr.io/nvidia/nemoclaw/sandbox-base:latest during image build/onboard, which fetches and executes remote image code as a required dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs provisioning and running remote installers that install system-level components (Docker, NVIDIA Container Toolkit), start host services, and bake configuration into sandbox images — actions that modify machine state and typically require elevated (sudo) privileges.