moonbit-practice

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The CI workflow includes a runtime install command that fetches and executes remote code via curl -fsSL https://cli.moonbitlang.com/install/unix.sh | bash, which downloads and runs a script during execution (assets/ci.yaml), so it is a required runtime dependency that executes remote code.