implementing-kubernetes-network-policy-with-calico

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runs kubectl create/apply against remote manifests on raw.githubusercontent.com (https://raw.githubusercontent.com/projectcalico/calico/v3.27.0/manifests/tigera-operator.yaml, https://raw.githubusercontent.com/projectcalico/calico/v3.27.0/manifests/custom-resources.yaml, https://raw.githubusercontent.com/projectcalico/calico/v3.27.0/manifests/calicoctl.yaml), which are fetched at runtime and executed/applied to the cluster as required installation steps, so they are runtime external dependencies that execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running sudo apt-get to install system-wide packages and requires cluster-admin RBAC (and other cluster-level changes), which directs the agent to perform privileged, state-changing operations on the host and cluster.