agentic-development

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The document defines and exposes state-changing tools (write_file with absolute paths and requiresConfirmation), runs arbitrary commands (runCommand, testCommand), and executes scripts from the filesystem, which enables modifying the host machine's files and state even if guardrails are suggested.