sentry-otel-exporter-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains runtime curl/docker pull instructions that fetch and rely on remote binaries and configs (e.g., https://api.github.com/repos/open-telemetry/opentelemetry-collector-releases/releases/latest and https://github.com/open-telemetry/opentelemetry-collector-releases/releases/download/v<numeric_version>/otelcol-contrib_<numeric_version>.tar.gz and the raw GitHub config URLs) which will execute remote code or directly supply runtime configuration the agent depends on.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs the agent to perform system-level actions (download and extract binaries, chmod and run a collector, edit/create config and .env files, and run Docker containers) and even says "Perform these steps for the user—do not just show them the commands," which pushes the agent to modify the host machine's state.