junior-qa
Warn
Audited by Snyk on Nov 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill prompt instructs the agent to install missing tools inside a Docker sandbox using
sudo npm i -g vercel, which involves obtaining sudo privileges and modifying system state via a privileged package installation.
Issues (1)
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata