setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs users to run a Docker alias that pulls and executes the remote image ghcr.io/basecamp/kamal:latest at runtime, and it also documents that kamal setup/kamal server bootstrap installs Docker using get.docker.com (which is typically fetched and executed as an install script), so both URLs are runtime external dependencies that execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the agent to run "kamal setup" which connects as root over SSH and installs Docker (via get.docker.com) and starts services on privileged ports, i.e. it directs privileged, system-level changes on hosts.