offload

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs launching a dispatch that runs codex with "--dangerously-bypass-approvals-and-sandbox", i.e. to disable the sandbox and give the agent full local access (a direct bypass of security mechanisms), so it pushes the agent to compromise the host.