ecs-security

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly recommends changing instance-level configuration and network controls (e.g., setting ECS_AWSVPC_BLOCK_IMDS in /etc/ecs/ecs.config, adding iptables DROP rules, and IMDSv2 hop‑limit changes), which are system-file and network modifications that require root/sudo and therefore can modify the machine state.