devcontainer-setup

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs include direct "curl | bash" install scripts from untrusted/placeholder domains (example.com) and a remote installer (claude.ai/install.sh) executed in the Dockerfile — remote install scripts executed automatically are a common malware vector and warrant caution.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The templates intentionally execute untrusted remote install scripts, grant elevated network capabilities, and configure the Claude assistant to bypass permission checks (with a convenience alias to force it), creating an intentional backdoor-like setup that enables remote code execution and potential data exfiltration.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Dockerfile fetches and executes remote installers during image build (e.g., curl -fsSL https://claude.ai/install.sh | bash), which runs remote code as part of the skill runtime.