releasing-tilebox-workflows

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes a pyproject example that pins an external package index URL (https://download.pytorch.org/whl/cpu), and the docs state dynamic runners may resolve and download wheels from such sources at runtime—meaning remote code (Python wheels) can be fetched and executed when runners install dependencies.