aflpp

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes runtime installation commands that fetch and build/compile remote code (git clone https://github.com/AFLplusplus/AFLplusplus which is then built via docker build, and curl -O https://raw.githubusercontent.com/AFLplusplus/AFLplusplus/stable/utils/argv_fuzzing/argv-fuzz-inl.h which downloads a header later compiled into targets), so these external URLs can cause remote code to be executed.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running root-required scripts (afl-system-config, afl-persistent-config), disabling kernel security mitigations (update-grub + reboot), and using a --privileged Docker container, all of which modify system state and require elevated privileges.