datadog

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Quick Start instructs running DD_API_KEY=... bash -c "$(curl -L https://s3.amazonaws.com/dd-agent/scripts/install_script.sh)", which downloads and immediately executes remote code from https://s3.amazonaws.com/dd-agent/scripts/install_script.sh as a required installation step.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running a remote install script (curl | bash) to install the Datadog Agent, which will modify system files and services and typically requires sudo privileges, so it directs the agent to change the host machine's state.