iblai-api-infrastructure

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The docs include runtime install commands that fetch-and-execute remote scripts or clone remote code (curl -fsSL https://deb.nodesource.com/setup_22.x | bash, curl -fsSL https://www.nvidia.com/nemoclaw.sh | bash, curl -LsSf https://astral.sh/uv/install.sh | sh, and git clone https://github.com/iblai/iblai-infra-cli.git), which are executed during setup and therefore constitute runtime external dependencies that execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly documents server provisioning and operations (SSH, Terraform/Ansible, systemd, cloud firewall consoles) which instruct the agent to perform elevated, system-level changes to hosts and thus can change the machine's state.