devbox

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The OpenCode profile includes a Docker build step that runs a remote installer via "RUN curl -fsSL https://opencode.ai/install | bash" (executed during image build when using a custom image), which fetches and executes remote code that the skill can rely on at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt instructs the agent to run devbox configure-ssh (which will modify the host SSH configuration), open persistent SSH tunnels, manage/expire devboxes, and handle secrets and image builds — actions that change the machine/user environment (though it does not request sudo or create system users).