docker-sandbox

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill instructs creating and running sandboxes that mount host workspaces and expose the host Docker socket (Docker-in-Docker capable), which lets code run inside the sandbox modify host files or control host Docker and thus can compromise the machine state.