nextflow

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains explicit runtime commands that fetch and execute remote code (e.g., curl -s https://get.nextflow.io | bash and curl -fsSL https://get.nf-test.com | bash) and instruct Nextflow to pull and run remote pipelines/containers at runtime (e.g., nextflow run nf-core/rnaseq which pulls pipeline code from GitHub, and container images from quay.io/biocontainers or https://depot.galaxyproject.org/), so these URLs are runtime dependencies that will execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running a sudo command to move the nextflow binary into /usr/local/bin (modifying a system directory and requiring elevated privileges), which pushes the agent to perform privileged system changes.