pdk-prerequisites

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime installation commands that fetch and execute remote scripts (executing remote code), e.g. curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash
• (Node), curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y (rustup), and curl -fsSL https://get.docker.com | sh (Docker), so these URLs are runtime external dependencies that execute code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt directs the agent to run system-altering installation commands (sudo apt setup, apt-get installs, piping remote scripts to sh, and sudo usermod -aG docker $USER) that require elevated privileges and change system configuration and user groups.