infra-security-audit

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs the agent to run privileged host-level changes (run audit/apply scripts, enable ufw, modify sshd configs, install/harden services like fail2ban/CrowdSec, change SSH ports) that modify system files and require sudo, so it pushes the agent to change the machine state despite safety gates.