process-runner

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.40). The skill is explicitly designed to limit dangerous actions (blocklist, timeouts, minimum privileges, audit logging, and explicit checks before sudo) and does not instruct the agent to create users or modify boot/init by default, but it still allows running arbitrary shell commands (including background jobs with shell=True) and its blocklist is not comprehensive (e.g., no explicit blocks for useradd/sshd_config editing), so it presents a moderate residual risk of changing machine state if misused.