define-slo-sli-sla

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references https://github.com/slok/sloth/releases/download/v0.11.0/sloth-linux-amd64 and ghcr.io/slok/sloth:latest to download and install third-party tooling at runtime, representing an unofficial external operational dependency with weak/unknown provenance.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill prompt instructs the agent to install a monitoring tool (Sloth) using sudo, which modifies system-level directories (/usr/local/bin).