permission-max

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs the agent to request and apply broad permission escalations (modifying allow lists, enabling server/tool autoApprove, and using CLI --allow flags) that change host permissions and can bypass security confirmations, which pushes changes to the machine's security state.