atheris

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Dockerfile in SKILL.md explicitly adds the apt repo (http://apt.llvm.org/bookworm/) and runs wget to fetch and install a GPG key (https://apt.llvm.org/llvm-snapshot.gpg.key) during build, which causes remote code/packages to be fetched and executed as required dependencies.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes commands that write to system locations (e.g., /etc/apt/sources.list.d and /etc/apt/trusted.gpg.d) and runs apt installs / creates system-wide paths (venv under /opt) which require root privileges and therefore push the agent to modify the machine state (even though shown in a Dockerfile, the same operations would be privileged on a host).