nv-generate-mr-brain-finetune

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill manifest and runtime callpaths explicitly fetch and rely on the upstream GitHub repo (https://github.com/NVIDIA-Medtech/NV-Generate-CTMR) via a git clone/install_command and may download model assets from https://huggingface.co at runtime (download_model_data / upstream scripts), which brings remote code/assets into the environment and leads to execution (pip install and running upstream scripts).