install-profilers

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly downloads and installs remote executables during runtime (e.g., wget https://developer.nvidia.com/downloads/assets/tools/secure/nsight-systems/2026_2/nsight-systems-2026.2.1_2026.2.1.210-1_amd64.deb which is dpkg -i'd, and git clone https://github.com/wolfpld/tracy.git which is built/executed), meaning these URLs fetch and execute remote code required by the skill.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running sudo commands to install packages and modify system files (dpkg/apt installs, echo to /proc/sys and /etc/sysctl.d, creating symlinks under /usr/local/bin), which requires elevated privileges and alters the machine state.