agent-plugin-eval

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly instructs the agent to execute a repository-supplied script ("python3 scripts/inspect_plugin.py --json"), which would run untrusted code from the target plugin and could modify the machine state despite the earlier "do not run" safety guidance.