ubuntu-deployment

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The quick deploy script directly runs a remote installer via "curl -fsSL https://get.docker.com | sh", which downloads and immediately executes external code at runtime and is required for the deployment, so it poses a high-risk external dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs the agent to run numerous privileged operations (sudo apt installs, sed edits to /etc/ssh/sshd_config, systemctl enable/restart, writing /etc/systemd/system, usermod -aG docker $USER, chown of /opt, etc.), which modify system files/services and require elevated privileges, so it clearly pushes the agent to compromise the host state.