debug-linux-host-collection

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md instructs the user to paste outputs from journalctl (agent logs) and wrapped OPAL/Observe query results into the chat, and those outputs are workload-authored/untrusted at runtime, creating indirect prompt-injection exposure.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running sudo commands that edit and replace /etc/observe-agent files, restart systemctl services, and reinstall packages — privileged actions that modify the host system state.