boxlang-deployment

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes explicit install commands that fetch-and-execute remote scripts (curl -fsSl https://downloads.ortussolutions.com/bvm/install.sh | bash and curl -fsSl https://downloads.ortussolutions.com/boxlang/install.sh | bash) which would execute remote code during setup and are presented as required/recommended dependencies.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill includes system-level installation steps (e.g., apt-key add, writing to /etc/apt/sources.list.d, apt-get install, and curl | bash installers) that require root/sudo and modify system files, so it pushes the agent toward changing the machine state.