cardano-protocol-params

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The wrapper script (scripts/cardano-cli.sh) will at runtime invoke docker run using the default image ghcr.io/intersectmbo/cardano-node:latest, which will pull and execute remote container code, so this registry URL is a runtime external dependency that can execute code.