environment-setup-guide

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes multiple installation commands that fetch and immediately execute remote scripts at runtime (curl|bash or equivalent), specifically https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh, https://deb.nodesource.com/setup_20.x, https://community.chocolatey.org/install.ps1, and https://get.docker.com, which constitute high-risk remote code execution during setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly includes and recommends running privileged commands and system-modifying actions (sudo apt installs, piping scripts to sudo, sudo usermod to change group membership, sudo systemctl, etc.), which instruct an agent to change the host system state.