cardano-cli-doctor

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The wrapper script will pull and run the remote container image ghcr.io/intersectmbo/cardano-node:latest at runtime (if local cardano-cli is missing), which executes remote code from that URL and is used as a required fallback—so it is a runtime external dependency that can execute code.