What the reviewer found
Tutorial for authoring Harbor benchmark tasks: the SSH key generation, curl-piped astral.sh/uv installer, and Dockerfile apt-get cache cleanup are all example task content and standard build boilerplate, not instructions run against the installer's own machine. Nothing here reaches outside the sandboxed task container it documents.
example-or-fixture— an example or test fixture
What was read
The file as it ships in pku-liang/hwe-bench:
deps/harbor/skills/create-task/SKILL.md
What the static scan said
The scan flagged 4things. The reviewer kept 0 and dismissed 4 as false.
PE3Reaches for credential files — false positiveSC2Downloads and executes remote code — false positiveRMRecursive force delete — false positiveNETMakes network calls — false positive
How this review was made
Sonnet 5 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.