vuls-linux-cve-scanner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow ingests vulnerability intelligence from NVD/OVAL/JVN/vendor advisories and then runs Vuls scans, but the skill instructions do not describe ingesting arbitrary outsider-authored free text submitted via a queue/feed/chat/inbox or by arbitrary posts/inputs.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes explicit sudo commands for package upgrades and asks whether root privileges are allowed, which instructs or enables system state changes that require elevated privileges.