langchain

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes tools and middleware that perform filesystem modification and arbitrary shell execution (e.g., delete_file, ShellToolMiddleware, FilesystemFileSearchMiddleware), which enable an agent to modify or damage the host system even if it doesn't explicitly request sudo or create users.