proxmox-infrastructure

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Terraform example references an external GitHub module (github.com/basher83/Triangulum-Prime//terraform-bgp-vm?ref=vm/1.0.1) (and the proxmox provider source bpg/proxmox) which would be fetched at runtime by terraform/init and pulls remote code (module/provider) that is required to run and will be executed to perform provisioning, meeting the criteria for a runtime external code dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly instructs creating and modifying VMs, network (VLAN/MTU) and CEPH/storage configuration and to run Ansible/Terraform/Proxmox API actions that change host/cluster state and require elevated privileges, so it encourages modifying the machine(s) state.