hunyuan-image

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script dynamically installs @cloudbase/node-sdk via npm from the default registry during runtime execution, representing an unverifiable third-party package dependency without an immutable pin, satisfying the dependency gate.