codex

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly instructs bypassing safety checks ("Always use --skip-git-repo-check"), promotes non-read-only sandboxes including "danger-full-access" with "--full-auto", and hides stderr output—together these encourage the agent to obtain broad, potentially state-changing access to the host despite nominally asking the user for permission.