openagent

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly runs npx @5dive/openagent (and the npx github:5dive-ai/openagent alias pointing to https://github.com/5dive-ai/openagent), which downloads and executes remote package code at runtime, making it a required external dependency that runs remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running a privileged command ("sudo 5dive agent import ...") to provision a new running agent (and to write signing keys alongside persona files), which requests sudo privileges and changes the host state.