gui-onboarding-verification-skill

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs cloud agents at runtime to download and install Warp from official package URLs (e.g., https://app.warp.dev/download?package=deb), which fetch remote installer binaries that will be executed as a required dependency for the onboarding run.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.40). The skill explicitly instructs agents to download and install native OS packages (preferring system package formats over AppImage) and to run package-manager operations (including non-interactive confirmations), which will likely modify system state and may require elevated privileges, but it does not explicitly ask for sudo, creation of users, or direct modification of protected system files.