saas-security-posture

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill prompt instructs the agent to write scripts into system directories (/usr/local/bin/) and add crontab entries under /etc/cron.d/, which requires root or sudo privileges and modifies system-wide state.