migration-wizard

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The protocol explicitly instructs the agent to execute arbitrary install scripts and install_commands (delegated to a local-ops agent) which can modify system files, request sudo, or create users — so it enables potentially privileged, state-changing actions on the host.