huggingface-spaces

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly instructs installing remote runtime packages (examples: direct wheel URLs under https://huggingface.co/datasets/multimodalart/zerogpu-blackwell-wheels/resolve/... in requirements.txt and a runtime pip install like git+https://github.com/facebookresearch/demucs in app.py), which are fetched and executed during build/runtime and are relied on as required dependencies.