code-executor

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly allows the agent to write and execute arbitrary code (including bash and Python), shows examples that modify the filesystem (os.rename) and installs packages (pip install pandas), so it can change the machine state—despite sandbox defaults—if confirmations or permissive settings are used.