portainer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill calls the Portainer API at runtime (PORTAINER_URL) and the redeploy flow triggers Portainer to pull and run code from the stack's Git repository (example shown: https://github.com/user/repo), so external git content fetched during runtime can cause remote code execution.