amir-publish

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The workflow runs "git fetch origin" / "git pull" to retrieve the repo from the remote git "origin" and then runs "make install" (locally and on remotes), which means remote content from the git origin URL will be fetched at runtime and executed—risking execution of remote code from the repo origin.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs the agent to change repository state (git add/commit/push), run local and remote installs (make install), and execute commands over SSH on multiple hosts—actions that modify the machine state and can run arbitrary install steps on remote systems.