synology-dsm

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the operator/agent to download Synology kernel source from https://archive.synology.com/download/ToolChain/Synology%20NAS%20GPL%20Source/-/ (and a specific txz at https://global.synologydownload.com/download/ToolChain/Synology%20NAS%20GPL%20Source/-//linux-3.10.x.txz) as a required runtime step to read/derive recovery actions and to build patched tools, meaning remote code/content fetched at runtime directly informs and controls agent actions.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs privileged, state-changing actions (e.g., telling the user/agent to run sudo/sudo -i, stop/start packages and systemd units, build dm-snapshot overlays and run btrfs/mdadm commands, and edit system files under /etc.defaults), which push the agent to perform modifications requiring elevated privileges and potentially affect the host state.