direnv

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.40). The skill repeatedly instructs the agent to run "direnv allow" which approves and can execute arbitrary code in a project's .envrc (allowing changes to the machine state), but it does not ask for sudo, create users, or modify system-level config files and includes explicit safety guardrails to review .envrc before approving.