neuropixels-analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime calls to load pretrained UnitRefine models from Hugging Face (e.g., repo_id "SpikeInterface/UnitRefine_..."; https://huggingface.co/SpikeInterface), which will fetch and unpickle remote .skops/model artifacts at runtime (possible remote code execution), so this is a high-confidence risky external dependency.