core-onboarding

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The onboarding skill includes executable shell commands that fetch-and-run third-party installer scripts at runtime (curl | bash / sh), e.g. https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh, https://deb.nodesource.com/setup_20.x, https://get.pnpm.io/install.sh and https://packages.microsoft.com/keys/microsoft.asc, which would execute remote code during environment setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly produces copy-paste setup commands that include sudo apt installs and systemctl commands (e.g., installing packages, starting docker, adding apt keys), which instruct changing system state and requiring elevated privileges.