orbstack-best-practices

Warn

Audited by Snyk on Aug 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill includes an explicit sudo command that requests elevated privileges (sudo dpkg... && sudo apt install ...) and also shows commands that run as root or perform destructive state changes (orb -m myvm -u root; orb reset), which encourage modifying the machine's state or obtaining elevated privileges.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 9, 2026, 05:07 PM
Issues
1
Security Audit — snyk — orbstack-best-practices