huawei-cloud-kubectl-cce-installer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The installer script downloads binaries and clones/builds source at runtime from external endpoints (e.g., https://dl.k8s.io/, https://gitee.com/pancake0001/kubectl-cce-plugin, https://github.com/kubernetes/kubernetes.git and the Huawei OBS bucket), so these URLs are runtime dependencies that fetch and install/execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly performs local system changes (installing binaries into /usr/local/bin), documents that elevated permissions are required, and even shows a sudo installation example, which pushes the agent toward modifying protected system files.