nextflow

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). Flagged because the skill contains runtime install commands that fetch and execute remote scripts (curl -s https://get.nextflow.io | bash in SKILL.md and curl -fsSL https://get.nf-test.com | bash in references/testing.md), which directly run remote code as part of setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running "sudo mv nextflow /usr/local/bin/" (and other system-level install commands), which requires elevated privileges and modifies system files/directories on the host.