project-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs fetching and using external repositories that will be read/executed at runtime — specifically the blueprint repo loxosceles/project-blueprints, the devcontainer-state git clone git@github.com:loxosceles/devcontainer-state.git, and the npx-installed skill loxosceles/ai-dev — which directly control the agent's instructions and can execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly tells the agent to run a destructive privileged command ("sudo rm -rf ~/.devcontainer-state") to fix root-owned mount targets, which instructs use of sudo and modification/removal of system files.