cluster-admin

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's Kubernetes manifests reference external container images that are fetched and executed at runtime (registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.14, registry.k8s.io/autoscaling/cluster-autoscaler:v1.30.0, and bitnami/etcd:3.5), so these are runtime external dependencies that will execute remote code and are required for the skill.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly instructs privileged system changes (multiple sudo commands like kubeadm init/upgrade, apt-get installs, systemctl restarts), recommends privileged containers and hostPath mounts of sensitive files (e.g. /etc/kubernetes/pki, /var/log), and therefore pushes the agent to modify the host machine state and services.