ppio-sandbox

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill contains instructions and setup scripts that download and install SKILL.md and reference files from https://raw.githubusercontent.com/PPIO/ppio-skills via curl during runtime setup, representing a common/reputable unofficial operational dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill prompt instructs the agent to install Node.js on Linux using sudo apt-get install, which involves obtaining sudo privileges and modifying system packages, potentially compromising the state of the machine.