qualcomm

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The buck-parity workflow includes a runtime installation step that downloads and installs a remote executable via wget from https://github.com/facebook/buck2/releases/download/${BUCK2_VERSION}/${ASSET} (then zstd -d / chmod / mv), which fetches and places a remote binary that will be executed and is required by the skill.