setup-uptime-checks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's required workflow (SKILL.md Step 2/Step 3 and the EXAMPLES.md) configures Blackbox Exporter and Prometheus to fetch arbitrary HTTP/HTTPS endpoints (static_configs targets and body-matching probes) and a status-page script that queries Prometheus, meaning untrusted third-party page content is ingested and used to drive alerts/status/incident actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill pulls and runs external container images (e.g., prom/blackbox-exporter:latest and cachethq/docker:latest) and includes a remote JS runtime dependency (https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js), all fetched and executed at runtime and required for the skill to operate, so they constitute remote code execution risks.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs deploying containers, creating Kubernetes configmaps, and modifying system-level Prometheus config paths (e.g., /etc/prometheus/uptime-alerts.yml) and restarting services—actions that change the host/cluster state and may require elevated privileges, so it can compromise the machine state.