download-sdk

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The PowerShell in this skill downloads and installs MSI packages at runtime from the CI feed (e.g. https://ci.dot.net/public/Runtime/{version}/dotnet-runtime-{version}-win-x64.msi and the x86 equivalent), which fetches and executes remote code that the tests depend on.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs downloading and installing system-wide MSI runtimes and uses Start-Process ... -Verb RunAs (UAC/elevation), which requests admin privileges and modifies the machine's system state.