echidna

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The docs include curl/git/docker install commands that fetch and install/execute remote code at runtime (e.g. https://github.com/crytic/echidna/releases/latest/download/echidna-x86_64-linux.tar.gz and ghcr.io/crytic/echidna/echidna:latest), so these URLs are runtime dependencies that introduce remote-code execution risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill includes explicit install commands that use sudo to move binaries into /usr/local/bin (and a CI step that does the same), which instructs modifying privileged system locations and thus pushes the agent to change the machine state.