spark-environment-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly pulls and runs external container images (nvcr.io/nvidia/pytorch:25.09-py3 and unsloth/unsloth:dgxspark-latest / unsloth/unsloth@sha256:) and directs installs from wheel hosts (download.pytorch.org/whl/cu130, wheels.vllm.ai/nightly/cu130), all of which are fetched at runtime and will execute remote code in the environment.