impacket

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill is an offensive AD reference that instructs the agent to create user accounts (including local admin via net user ... /add) and to modify a system config under /etc with sed -i, which likely requires sudo, though most actions target remote hosts rather than the agent's own machine.