k3s

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs users to run "curl -sfL https://get.k3s.io | sh -" which fetches and immediately executes a remote installer script from https://get.k3s.io at runtime, satisfying the conditions for a risky external dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running a system installer (curl | sh), uses sudo, and recommends privileged containers/hostPath and node/system-level configuration (e.g., /etc/rancher/k3s/* and system services), which directs the agent to modify the host system state and escalate privileges.