install-to-trash

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill installs a persistent PreToolUse hook and modifies user configuration (writes ~/.claude/hooks/intercept-rm.sh and patches settings.json), changing the agent/harness behavior and the machine's persistent state—an intrusive, security-sensitive modification even though it doesn't require sudo.