add-heartbeat

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The skill creates a persistent scheduled task that causes the agent to read and execute arbitrary checks/commands from a plain-text HEARTBEAT.md (and can automatically kill processes), which constitutes a persistent remote-execution vector and can be abused for backdoor, exfiltration, or process tampering.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to create files and register a recurring scheduled task and to kill host processes (pkill), i.e. it actively modifies the machine state and can change system behavior without explicit user intervention.