vagrant

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The guide includes commands that fetch and execute remote content at runtime — for example "curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add -" (downloads and pipes a GPG blob for installation) and "vagrant box add myorg/ubuntu-custom https://example.com/my-custom.box" (downloads a VM image/box that Vagrant will run), so these URLs are runtime dependencies that can execute remote-provided code/content.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The guide includes explicit host-level privileged operations (sudo apt-key/add, sudo apt-get install, enabling Hyper-V), and configuration/plugins that manage host system files (e.g., vagrant-hostmanager modifying /etc/hosts) which push an agent to change the machine's state with elevated privileges.