kc-gui

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The run_kc.ps1 script may download and execute the Visual C++ installer at runtime using the URL https://aka.ms/vs/17/release/vc_redist.x64.exe (Invoke-WebRequest + Start-Process), which fetches and runs remote executable code as a required fallback to satisfy kc.exe's VC++ dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.40). The skill does not request sudo/elevation, creating users, or editing system-level files, but it explicitly requires running PowerShell with -ExecutionPolicy Bypass and permits deleting a local config file, which constitutes bypassing a security mechanism and modifying local state, so I assign a low-to-moderate risk.