openstack-kolla-ansible

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The document instructs runtime image pulls (e.g., "docker pull quay.io/openstack.kolla/keystone:2024.1" and uses docker_registry: "quay.io"), meaning container images are fetched from quay.io at runtime and executed on hosts, so quay.io is a required external runtime dependency that delivers and executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt instructs performing numerous privileged, state-changing actions (installing packages/Docker, creating system users and /etc/kolla config files, modifying systemd/docker config, setting sysctl, stopping firewalls, changing SELinux, copying/restoring /etc and /backup, running docker exec as root), which explicitly modify the host system and require elevated/sudo privileges—so it pushes the agent to compromise the machine state.