proxyman-https-capture

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to fetch live documentation during runtime (e.g., https://docs.proxyman.com/llms.txt and the Atlantis docs/repository) and to use that fetched content to produce exact setup commands and dependency versions, so those URLs can directly control agent prompts/instructions at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs or permits actions that alter host/system state (install_certificate, set_system_proxy, inject_terminal/electron, install CA, root emulators) — operations that can require elevated privileges or compromise the machine — even though it asks to obtain user approval first.