loom-karpenter

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The Terraform snippet installs a Helm chart from the OCI registry "oci://public.ecr.aws/karpenter", which fetches remote chart content at deploy/runtime and results in executing that remote code in the cluster, so it is a runtime external dependency that can execute code.