materialize-terraform-self-managed

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.75). Most links are official or local references; however the Azure Blob URL (https://storageaccount.blob.core.windows.net/container) is a generic object-storage endpoint that can host arbitrary/untrusted files (including executables) and is commonly used to distribute malware if the storage account is untrusted.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs users to git clone and/or reference the GitHub repo https://github.com/MaterializeInc/materialize-terraform-self-managed (and the Terraform module source github.com/MaterializeInc/materialize-terraform-self-managed//kubernetes/modules/materialize-instance?ref=), which are fetched at runtime and cause Terraform to execute remote module code, so this is a runtime external dependency that executes remote code.