mise

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill contains an explicit runtime installation command "curl https://mise.run | sh" which fetches and immediately executes remote shell code from https://mise.run, so this URL is a runtime external dependency that executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly recommends running sudo to create system-level directories and symlinks (e.g., under /Library/Java/JavaVirtualMachines), which requires administrative privileges and modifies system files.