kubernetes

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill runs helm repo add cilium https://helm.cilium.io/ (SKILL.md) during its CNI installation step, which fetches remote Helm charts that are deployed/executed in the cluster, so this is a runtime external dependency that executes remote code: https://helm.cilium.io/

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill contains explicit commands that write system files as root (sudo tee to /etc/...), install packages with apt-get, call systemctl, and mount host paths (including /etc/kubernetes/pki), which push an agent to modify the host system and require elevated privileges.