homelab-pihole-dns

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs the installer to curl and then run a remote install script (https://install.pi-hole.net) and to download and install a cloudflared binary from GitHub (https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-arm64), which fetches and executes remote code at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs the user/agent to edit system files under /etc, run downloaded installers, use sudo to move binaries and change permissions, and create/enable systemd services — all actions that modify the host system state and require elevated privileges.