environment-setup-guide

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains explicit runtime commands that download and then execute remote install scripts (e.g., https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh, https://deb.nodesource.com/setup_20.x, and https://get.docker.com), which means external content fetched at runtime will be executed on the host.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs running sudo commands (apt installs, running installer scripts as root), modifying system groups (sudo usermod -aG docker), and invoking systemctl — all actions that change the host system state and require elevated privileges.