orchestration

Warn

Audited by Snyk on Mar 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly directs spawned WORKER agents to use tools like Bash, Read, Write, and Edit (and even includes a plugin install command), which enables and encourages agents to execute commands and modify files on the host—so while it doesn't explicitly demand sudo or creating users, it clearly permits state-changing operations and is a moderate risk.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 19, 2026, 06:28 PM
Issues
1
Security Audit — snyk — orchestration