core-mcp

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.40). The skill gives the agent direct terminal control (send arbitrary keystrokes, run commands, manage sessions/servers, kill processes and add/remove backends), which can be used to change system state, but it does not explicitly instruct privilege escalation, creating users, or editing protected system files.