crabbox

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill contains a runtime installation path that runs "git clone https://github.com/openclaw/crabbox.git" followed by "go build" and execution of the built binary (crabbox), so it fetches remote code at runtime and builds/executes it (https://github.com/openclaw/crabbox.git).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt instructs running privileged/system-modifying commands (e.g., sudo ln -sf into /usr/local/bin, installing packages via brew, and other actions that change system-wide state), which pushes the agent to modify the machine state.