odoo19-oca-devops

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime git clone / vendoring commands that fetch and install code from https://github.com/OCA/server-tools and https://github.com/OCA/account-financial-reporting (e.g., git clone ... https://github.com/OCA/server-tools), so remote repositories are fetched at runtime and can deliver/execute code the deployment depends on.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to provision servers and configure system services (DigitalOcean droplets, Nginx, Certbot/SSL, start services) and exposes a bash_tool for running system commands, which pushes the agent to modify host/system state and likely require sudo.