deno

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime fetch-and-execute of remote Deno modules (e.g., deno run -A -r https://fresh.deno.dev my-app and deno.land imports like https://deno.land/std@0.220.0/ and https://deno.land/x/oak@v12.6.2/) which cause remote code to be fetched and executed as required dependencies.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). Flagged because the skill includes an explicit command that bypasses Deno's permission model (deno run -A), which encourages running code with full privileges and can compromise the host environment.