volcengine-iac

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes terraform init which downloads Terraform provider binaries from the public registry (registry.terraform.io) at runtime — those fetched provider plugins are remote executables the skill relies on and which will run locally, so registry.terraform.io is a runtime external dependency that can execute code.