setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The setup explicitly runs remote installer scripts at runtime—e.g. "curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash
• && sudo apt-get install -y nodejs" (Node.js) and "curl -fsSL https://get.docker.com | sh" (Docker)—which fetch and execute remote code as part of required bootstrap steps.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly instructs the agent to run privileged commands (sudo apt-get, sudo usermod, setfacl, tee into /etc/systemd, start/stop system services, etc.), install and modify system services and configuration, and change user/group membership—actions that modify the machine state and require elevated privileges.