k7-total-security-deployment-framework

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains runtime installation commands that download and execute remote installer packages (e.g., curl -O https://download.k7computing.com/k7-console-16.0.1195.tar.gz and wget https://download.k7computing.com/k7-agent-linux-16.0.1195.deb) so these external URLs are runtime dependencies that fetch and run remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running sudo or privileged installers, modifying files under /etc, managing services (systemctl/service restarts), and deploying agents across endpoints—actions that require elevated privileges and change the system state.