render-deploy

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The SKILL.md includes a direct link to a raw shell script (https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh) and recommends piping it to sh, which is a high-risk pattern for distributing malicious code.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md the workflow uses MCP/CLI to access and then generate/validate Render resources (e.g., list_services(), analyze codebase files, and read render.yaml from the user’s Git repo), so it ingests outsider-authored free text originating from the user-controlled repository content and configuration.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime installation command that fetches and executes a remote shell script via curl | sh at https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh, which downloads and runs remote code during execution.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly tells the agent/user to rerun with "sandbox_permissions=require_escalated" to bypass sandboxed network restrictions (escalating permissions), which urges bypassing security controls on the host/sandbox.