libafl

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains installation commands that fetch and execute remote code (e.g., git clone https://github.com/AFLplusplus/LibAFL, curl https://sh.rustup.rs | sh, wget https://apt.llvm.org/llvm.sh followed by ./llvm.sh), so these external URLs are runtime dependencies that download and run code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs running system package installs and explicitly runs a third-party installer with sudo (e.g. "sudo ./llvm.sh 15" and curl|sh rustup), which directs privileged system changes and execution of untrusted installers.