frappe-ops-deployment

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The instructions include a runtime command that fetches and executes remote code via "curl -fsSL https://deb.nodesource.com/setup_18.x | sudo -E bash -", which is used during setup to install Node.js and therefore constitutes a required external runtime dependency that executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running many sudo commands and altering system files and services (nginx, supervisor, sudoers, letsencrypt, sshd_config), and advises creating/using a dedicated system user—actions that require elevated privileges and change the machine state.