nix

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The guide contains an installation command that directly fetches and executes remote code via curl -L https://install.determinate.systems/nix | sh, which would run remote code at runtime if executed.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This guide instructs running multiple sudo-level system commands (nixos-rebuild, darwin-rebuild, nix-collect-garbage), and to modify system configuration (e.g., darwin.nix/system.primaryUser, configuration.nix) which creates/changes user/system settings and requires elevated privileges, so it encourages modifying the host state.