apple-container

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Some URLs are benign (official Apple GitHub pages), but several entries are non-official or local unencrypted hosts and direct archive links (https://ex.com/kata-static.tar.xz, https://example.com/kernel.tar, http://my-web-server.test, http://192.168.64.3) which are untrusted download sources and could be used to distribute malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs users to download and run the signed installer from https://github.com/apple/container/releases during setup, which fetches and executes remote code (the installer) and is presented as the required installation path for the CLI.