dagu-workflows

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime fetch-and-execute install instructions and remote-sync/deploy artifacts that directly run external code or control workflows — specifically the curl command that pipes https://dagu.dev/install.sh | sh, the git sync remote https://github.com/org/dagu-workflows.git (pulling workflow definitions that control execution), and the Docker image ghcr.io/dagu-org/dagu:latest (pulls and runs remote container code).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs creating/modifying a systemd service under /etc/systemd/system and runs sudo systemctl enable/start (and uses sudo to write the service file), which requires elevated privileges and modifies system state.