aflpp

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes explicit runtime fetch-and-execute steps: "git clone --depth 1 --branch stable https://github.com/AFLplusplus/AFLplusplus" (used prior to docker build) and "curl -O https://raw.githubusercontent.com/AFLplusplus/AFLplusplus/stable/utils/argv_fuzzing/argv-fuzz-inl.h" (downloads a header that is then compiled), so these URLs pull remote code that will be executed as part of the workflow.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running scripts that require root and disable OS security mitigations (afl-system-config, afl-persistent-config), suggests disabling kernel mitigations via update-grub/reboot, and even uses a --privileged Docker run, which pushes the agent to obtain elevated privileges and modify system security state.