copyfail-go-lpe

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to download and execute prebuilt binaries from an arbitrary third-party GitHub repository (badsectorlabs/copyfail-go), introducing an unverified remote runtime dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill prompt explicitly provides instructions for downloading and executing a local privilege escalation exploit (CVE-2026-31431) that modifies system binaries such as /usr/bin/su to compromise the state of the machine and obtain root privileges.