systemd

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, scripts/verify-unit.sh ingests the contents of user-supplied unit files from its command-line arguments and passes them to systemd-analyze verify (systemd-analyze ... "$@").

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs creating and editing system-level unit files and running sudo systemctl/systemd-run commands (e.g., editing /etc/systemd/system, daemon-reload, enable --now), which require elevated privileges and modify the host's system state.