cali-ops-deploy-github-tailscale

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes and executes remote code at runtime via "curl -fsSL https://tailscale.com/install.sh | sh" and relies on remote GitHub Action repositories that are fetched and executed during workflow runs (e.g., tailscale/github-action@v4, docker/*-action, actions/checkout@v4).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running commands as root and making system-wide changes (creating a user, changing UFW rules, writing to /home/*/.ssh/authorized_keys, copying root Docker credentials, and using systemctl), which modify the machine state and require elevated privileges.