jellyfin-security-plugin

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt includes explicit instructions to copy/move files under /var/lib/jellyfin, edit plugin data, and run systemctl/restart and sudo ntpdate — all operations that modify system files or require elevated (sudo) privileges, so it pushes the agent to change the host state.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)