jenkins-agent-l3-deploy

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to fetch and run remote code (curl -sO http://:8080/jnlpJars/agent.jar followed by java -jar agent.jar) and relies on runtime git checkouts (git@github.com:owner/repo.git) whose contents control/execute the pipeline, so remote content is fetched at runtime and executed.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs installing packages with sudo, requires the agent user to be in the docker group with sudo NOPASSWD, and tells the agent to run privileged actions (e.g. sudo deploy, creating systemd units and writing root-owned files under /run), which directly modifies and weakens the host system state.