gitops-workflow

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains commands that fetch and execute remote content at runtime—most notably curl -s https://fluxcd.io/install.sh | sudo bash (executes a remote script), kubectl apply -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml (applies remote manifests), and Argo/Flux repoURLs like https://github.com/org/gitops-repo and https://github.com/org/my-app which the agents will pull as required runtime dependencies.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs executing a remote install script with elevated privileges (curl ... | sudo bash), which requests sudo access and can modify the host system state.