agent-containerizer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Dockerfile runs a remote installer via "curl -fsSL https://deb.nodesource.com/setup_20.x | bash" during image build (and also fetches packages via npm), which fetches and executes remote code as a required setup step, so external content can execute code.