code-server-setup

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill's purpose is openly disclosed and legitimate, but it also quietly disables update checks and workspace trust on a publicly exposed root shell, weakening protections beyond what the setup needs.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.65). The skill has the agent install software via a curl-pipe-to-shell script, write config under /root, and register a persistent, internet-exposed service that gives root shell access, all while telling the agent not to ask for confirmation.