k7-total-security-deployment

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Multiple direct downloads of installers (.msi, .deb, .rpm, .pkg) are hosted on a generic/untrusted domain (example.com) which is a high-risk indicator for malware distribution; the Slack webhook and internal endpoints are sensitive (exposure risk) while api.openai.com and api.anthropic.com are legitimate API endpoints.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The installation sections run runtime downloads and execute remote installer binaries (e.g., https://example.com/k7-agent-16.0.1195-win-x64.msi, https://example.com/k7-agent-16.0.1195-macos.pkg, https://example.com/k7-agent-16.0.1195-amd64.deb), so the skill relies on and executes external code fetched at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs installing packages with sudo/dpkg/rpm/installer, restarting services via systemctl, applying profiles and quarantine actions, and otherwise performing privileged system modifications—actions that require elevated privileges and change the host's state.