deskflow-linux-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's source-build workflow explicitly runs "git clone https://github.com/deskflow/deskflow.git" and then builds/runs that fetched repository (cmake/cmake --build), which fetches and executes remote code at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs running privileged system commands (e.g., "sudo apt-get remove -y deskflow") and suggests installing system packages via the system package manager, which modify system state and require sudo privileges.