runtime-commandbox

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The install step "curl -fsSl https://downloads.ortussolutions.com/commandbox-cli-install | bash" fetches and executes a remote script at runtime, so this URL is a high-risk runtime external dependency that runs remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt includes explicit sudo commands (apt-key add, apt-get install) and instructions that modify system state (installing packages, writing server/webroot to system paths, managing SSL, OS service/JDK integration) which ask the agent to perform privileged operations on the host.