home-lab

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs users to run "curl -fsSL https://get.docker.com | sh", which fetches and immediately executes a remote installer script at runtime (https://get.docker.com), so this is a high-confidence runtime external dependency that executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill contains multiple instructions that modify system state and require root/privileged actions (e.g., installing Docker via curl|sh, running sudo usermod -aG docker, editing system/service configs, exposing devices like /dev/dri, installing system software and tunnels), which push an agent toward performing privileged changes on the host.