openhands

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs running the agent "local, no sandbox (agent has full FS access!)" and repeatedly recommends a global npm install, which encourages running an unsandboxed agent with potential elevated/FS-modifying capabilities that can change machine state.