git-ssh-custom-host

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly connects to arbitrary user-supplied hosts and ports and parses their responses (e.g., the "Port Service Detection" nc response check, "ssh -T $GIT_HOST" connectivity test, and "git ls-remote ssh://$GIT_HOST..." verification) which ingests untrusted third-party network/web content that can influence subsequent actions.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs modifying system state (e.g., appending entries to /etc/hosts using sudo) and changing SSH configuration/keys, which requires elevated privileges and can alter the machine's network/name resolution and authentication behavior.