uncloud

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill demonstrates runtime fetching and execution of remote container images (e.g., registry.k8s.io/pause:3.9, also implied pulls like nginx:latest and postgres:18) which are external dependencies pulled at runtime and executed as code, so registry.k8s.io/pause:3.9 is flagged.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). This skill explicitly instructs bootstrapping/joining machines (uc machine init/add), deploying global services (Caddy), configuring WireGuard and host-bound ports, and other cluster-wide operations that modify networking, services, and likely require elevated/sudo privileges on hosts, so it can change the machine state and compromise the host if misused.