hadolint

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). This skill explicitly fetches and runs external tooling at runtime—e.g., downloading the hadolint binary from https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64 or pulling/running the hadolint/hadolint Docker image—which executes remote code and is required for validation.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly instructs the agent to attempt system installation using commands like "sudo apt-get install hadolint" and to write to /usr/local/bin (wget + chmod), which require root/sudo and modify system files, so it pushes the agent to change the machine state.