chaos-engineer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The GitHub Actions workflow runs a runtime command that directly fetches and applies remote Kubernetes manifests (executing that external configuration) from https://litmuschaos.github.io/litmus/litmus-operator-v2.14.0.yaml, which is a required dependency to install Litmus in the CI job.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running destructive operational commands (kubectl apply/patch, chaos-monkey kills, starting services, installing tooling) that modify cluster/host state and can disrupt production systems.