github-actions-ci

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a direct install command that fetches and executes remote code at runtime via "curl -s https://raw.githubusercontent.com/nektos/act/master/install.sh | sudo bash", which downloads and runs a script from raw.githubusercontent.com.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running a remote install script with sudo (curl ... | sudo bash) which asks the user/agent to obtain elevated privileges and modify the host system, so it can compromise machine state.