gitops-workflow

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill contains installation commands that fetch and execute remote content at runtime (e.g., kubectl apply -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml and curl ... https://fluxcd.io/install.sh followed by sudo bash), which directly runs external code/manifests on the target environment.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running a downloaded installer with "sudo bash", which asks the agent to obtain elevated privileges on the host and thus can modify the machine state.