e2e

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The docker-compose example and build/run instructions pull and run remote container images (otel/opentelemetry-collector-contrib:latest and aliyun/loongcollector:0.0.1), which are fetched at runtime and execute remote code inside containers.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The guide includes explicit privileged host operations (e.g., "sudo rm -rf test/e2e/report") and system-level Docker image/container modifications (docker cp/commit/create) that modify the machine state and may require elevated privileges.