tools-permission-fix

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This code intentionally introduces a broad "executor" permission that bypasses host permission checks (enabling execution of arbitrary scripts and consolidation/movement of per-script permissions into global scope), and it also auto-adds read access to a user plugin cache—together these behaviors create a high-risk capability that can be abused as a backdoor for remote code execution and data exposure.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs writing and modifying host-platform settings and permission rules (including adding a broad executor Bash(...) permission that enables unrestricted script execution), which alters the machine's configuration and agent privileges and therefore can compromise the host state.