taste-review

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly tells the agent to "Run outside the sandbox" (requesting reusable approval) and to read a macOS Keychain OAuth token via the security CLI, which encourages sandbox escape and access to sensitive credentials even though it doesn't request sudo or file modifications.