c-lockin

Warn

Audited by Snyk on Mar 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to generate and immediately execute unreviewed shell scripts (e.g., /tmp/lockin-start.sh) that perform "distraction blocking" and environment setup and thus can modify system state or require elevated privileges even though it doesn't explicitly mention sudo—this enables potentially privileged changes to the machine.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 9, 2026, 08:45 AM
Security Audit — snyk — c-lockin