boxlang-chromebook

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runs remote installer scripts at runtime (curl -fsSL https://downloads.ortussolutions.com/boxlang/install-boxlang.sh | bash and curl -fsSL https://downloads.ortussolutions.com/bvm/install.sh | bash), which fetch and immediately execute remote code that the skill relies on for installation.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs using sudo to update/upgrade the system, install packages, write to system dirs (/opt, /usr/share/keyrings, /etc/apt/...), and otherwise modify system-level configuration—actions that require elevated privileges and change the machine state.