crack-hashcat

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The CI workflow includes a runtime command that downloads and pipes a shell installer from GitHub and executes it (curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash), which fetches and runs remote code during skill execution.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs using sudo to read privileged files (e.g., sudo cat /etc/shadow, sudo unshadow /etc/passwd /etc/shadow) and to extract system hashes, which requires elevated privileges and directs the agent to access/modify sensitive system state.