openstack-kolla-ansible-ops

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes runtime commands that fetch and execute remote code—specifically "pip install --upgrade kolla-ansible==" (pulls packages from PyPI) and "kolla-ansible -i /etc/kolla/inventory pull" (pulls container images from registries)—which are required for upgrades and thus represent external runtime dependencies that can execute code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly instructs the operator to modify system-wide files (e.g. /etc/kolla/*), run privileged commands (docker restart/logs/exec, kolla-ansible operations, mariadb backup/restore, pip install upgrades), and perform backups/restores and service restarts that change the host state and require elevated privileges, so it clearly pushes the agent to modify and potentially compromise the machine state.