container-hadolint

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly downloads and executes remote code at runtime — e.g. wget https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64 (and CI workflow references that pull/run remote actions/images such as uses: hadolint/hadolint-action@v3.1.0 and image: hadolint/hadolint:latest-debian), so these external URLs are runtime dependencies that execute fetched code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill primarily focuses on linting Dockerfiles, but it includes installation instructions that write to /usr/local/bin and change permissions (wget ... /usr/local/bin/hadolint; chmod +x ...) which modify system paths and typically require sudo, so it encourages host state changes even though most other actions (creating users) occur inside container images.