docker

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The BuildKit examples show runtime commands that fetch remote code (e.g., "RUN --mount=type=ssh git clone git@github.com:org/private-repo.git"), which pulls external repository content into the build and can introduce/execute remote code during skill runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The prompt explicitly suggests enabling BuildKit either via an environment variable or by editing /etc/docker/daemon.json (a system-level config file that requires root to modify), which pushes an agent toward changing machine state and files that require elevated privileges.