PocketBase Deploy

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs fetching and running the PocketBase binary from https://github.com/pocketbase/pocketbase/releases/download/v0.X.X/pocketbase_0.X.X_linux_amd64.zip (also referenced in the Dockerfile via ADD), which downloads remote executable code that will be executed and is a required dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt instructs creating a system user, writing/modifying systemd and reverse-proxy config files, editing /etc files, and running sudo/systemctl/certbot commands — all actions that change system state and require elevated privileges.