host-governance

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Some of the listed URLs are benign vendor docs, but a few are potential distribution/credential risks: an unknown install endpoint (get.beszel.dev), embedded credentials in a URL (user:pass@example.test/a), and internal Jenkins endpoints that can serve build artifacts (jenkins.example.test, internal.invalid/queue/item/1/) which could be abused to deliver executables if untrusted.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The server bootstrap APPLY_SCRIPT fetches and executes remote install scripts at runtime (curl -fsSL https://tailscale.com/install.sh then sh, and curl -fsSL https://get.beszel.dev then execute) in scripts/server_bootstrap.py, which runs during the skill's apply operation.