gcp-agent-shadow-deployer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The deploy script calls gcloud run deploy --image "$IMAGE_URL", which at runtime will fetch and run a remote container image (e.g., a registry URL like gcr.io/... or docker.io/...), so the external image URL is a required runtime dependency that results in executing remote code.