hare-lang

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The workflow's install step runs "git clone https://git.sr.ht/~sircmpwn/hare" and then builds/installs that fetched repository (make check / sudo make install), so the URL is used at runtime to fetch and execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The workflow explicitly instructs running "sudo make install" to install Hare system-wide, which requests elevated privileges and modifies system files (i.e., it pushes the agent to change the machine's state with root access).