rds-db2

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill contains an explicit runtime "curl -sL https://bit.ly/getdb2driver | bash" (plus runtime downloads of installer artifacts from https://aws-blogs-artifacts-public.s3.amazonaws.com/... and a jq binary from GitHub) which fetches remote scripts/binaries and executes them, so external content controls code execution at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs running client installers "as root and as db2inst1" and to invoke bundled install/config scripts that modify the local client environment (implying privileged/sudo operations and system configuration changes), so it pushes the agent toward altering the host state.