ubuntu-deployment

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The script executes remote shell code via "curl -fsSL https://get.docker.com | sh" which fetches and runs code at runtime from https://get.docker.com.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs privileged, state-changing operations—numerous sudo commands, installing software via a remote install script, modifying /etc/ssh/sshd_config, creating and enabling a systemd service, and changing user/group membership—so it pushes the agent to alter the host system state and requires elevated privileges.