post-deploy

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). AGENTS.md mandates running compose-agentsmd (or "npx compose-agentsmd" if not installed), which fetches/executestooling and pulls rules from the external source github:metyatech/agent-rules (github:metyatech/agent-rules@HEAD/...), and those fetched rules directly control agent instructions at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt requires the agent to inspect and modify runtime services and scheduled tasks (e.g., restart via systemctl/PM2, check cron/Task Scheduler, rebuild and replace running instances), actions that change system state and often require elevated (sudo) privileges.