libafl

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes commands that fetch and execute remote code at runtime (e.g., git clone https://github.com/AFLplusplus/LibAFL followed by ./build.sh, wget https://apt.llvm.org/llvm.sh then sudo ./llvm.sh, and curl https://sh.rustup.rs | sh), so these external URLs are runtime dependencies that execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill includes explicit system-modifying commands (e.g., "sudo ./llvm.sh 15", apt installs, running installer scripts like rustup) that require elevated privileges and change the host/system state, so it pushes the agent/user to perform privileged system modifications.