cilium-ebpf
Warn
Audited by Snyk on Jul 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The SKILL invokes a runtime command "helm repo add cilium https://helm.cilium.io/" which fetches and installs remote Helm charts (configuration and container images) from https://helm.cilium.io/ that will be executed in the cluster, so this is a required runtime dependency that can execute remote content.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs installing and configuring kernel-level networking (Cilium/eBPF), recommends kernel upgrades and WireGuard kernel modules, and runs privileged tools/commands (helm installs, cilium bpf, tcpdump, clustermesh) which require root/capabilities and modify the host/kernel networking state.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata