nextflow

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill contains direct install commands that fetch and execute remote scripts at runtime via curl | bash (https://get.nextflow.io in SKILL.md and https://get.nf-test.com in references/testing.md), which runs remote code during setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly tells the user/agent to run "sudo mv nextflow /usr/local/bin/" which requests elevated privileges and modifies a system directory, encouraging changes that require sudo.