debugging-code

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes installer commands that fetch and install remote executables/archives at runtime (notably scripts/install-dap.sh which queries https://api.github.com/repos/AlmogBaku/debug-skill/releases/latest and downloads from https://github.com/AlmogBaku/debug-skill/releases/download/... and references/installing-debuggers.md which fetches and extracts js-debug via https://api.github.com/repos/microsoft/vscode-js-debug/releases/latest and https://github.com/microsoft/vscode-js-debug/releases/download/... | tar -xz), so required external content is downloaded and installed/installed binaries could execute at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly recommends disabling macOS System Integrity Protection (csrutil disable) to attach a debugger to a running process and includes instructions for installing and attaching debuggers, which instructs bypassing OS security and enables altering/inspecting live system processes.