at-spi-linux

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes a runtime installation step that clones and builds code from https://gitlab.com/dogtail/dogtail.git (git clone ... then python3 -m build / pip install), which fetches and executes remote code during setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes multiple instructions to run sudo package-install commands (apt/dnf and pip with sudo) that modify system state and require elevated privileges.