dstack

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill instructs the agent to write and modify SSH alias/config files (e.g., ~/.dstack/ssh/config and potentially ~/.ssh/config), run background attach processes, and request permission escalation if the sandbox cannot write those files, which directly modifies the host's configuration and thus can compromise machine state.