kali-tools-on-ubuntu-safe-path

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The Procedure (steps 2–3 and the Docker pivot) explicitly instructs adding the public Kali rolling APT repo and running apt-get -s -t kali-rolling install and docker pull kalilinux/kali-rolling:latest, requiring the agent to fetch and inspect package lists/output from public third‑party repositories and containers (apt/Docker) and then make workflow decisions based on that untrusted content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly runs "docker pull kalilinux/kali-rolling:latest" and "docker run ... kalilinux/kali-rolling:latest" at runtime, which downloads and executes a remote Docker image (external code) that the skill relies on for the recommended isolated install path.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the agent to add/modify apt sources and pins, install packages (including docker), run systemctl, change file capabilities and edit system files (e.g., /usr/share/..., /etc/apt/*), all of which require elevated privileges and modify host state—so it pushes the agent to perform potentially harmful privileged changes.