frontend-audit

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's Python helper (_omniparser.py) calls huggingface_hub.snapshot_download with repo_id="microsoft/OmniParser-v2.0", which downloads a remote HF repository and then imports/executes its handler.py at runtime (scripts/_omniparser.py calls snapshot_download and then imports handler), so remote code is fetched and executed during skill runtime: microsoft/OmniParser-v2.0

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs the agent to run system package manager commands that use sudo (e.g., sudo apt install, sudo dnf install) to install Python, which modifies system files and requires elevated privileges.