ai-agent-security

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references external URLs such as https://gvisor.dev/archive.key and https://storage.googleapis.com/gvisor/releases in a shell script used for setup and installation, representing an unverified runtime external dependency from a third-party source.