companion-clis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). High-confidence: the skill includes one-time installer commands that fetch and execute remote code at runtime — specifically https://hf.co/cli/install.sh (curl | bash), https://get.docker.com (curl | sh), and https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip (downloaded and then ./aws/install) — which are runtime external dependencies that execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.30). The document advises running a privileged WSL2 install ("In PowerShell as Administrator") and references credential/SSH operations (ssh-keygen, ~/.aws/credentials), which involve changing system state and elevated operations, but it does not explicitly instruct the agent itself to obtain sudo or directly modify system files—so the risk is present but moderate-to-low.