fleet

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The bootstrap flow fetches and runs remote content at runtime: it clones the skills repo (https://github.com/onmax/skills.git) which supplies agent skills that can control prompts, and it executes the Tailscale installer via curl|sh (https://tailscale.com/install.sh), both of which are required by prepare and thus present a high-risk external dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs installing an operator public key, "patch the host", creating admin and agent profiles, and disabling/modifying services and timers—actions that create users and modify privileged system files.