checkout

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to check out an arbitrary user-provided ref and run project install/build commands (bun i; bun run build), which will execute untrusted code and can modify the host environment or run arbitrary commands.