configuring-snort-ids-for-intrusion-detection

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Flagged because SKILL.md Step 4 explicitly instructs downloading Snort community rules (wget https://www.snort.org/...) and cloning PulledPork from GitHub, both public/untrusted third‑party sources whose rule files are ingested by Snort and directly influence detection behavior and downstream agent decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill's install steps explicitly fetch and run remote code that the deployment depends on (e.g., git clone https://github.com/snort3/libdaq.git, git clone https://github.com/snort3/snort3.git, git clone https://github.com/shirkdog/pulledpork3.git and wget https://www.snort.org/downloads/community/snort3-community-rules.tar.gz), so these URLs are used at runtime to obtain and execute required code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs using sudo to install software, edit system files, create and enable systemd service units, and change network interface settings—actions that modify system state and require elevated privileges.