a2ui

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.40). The skill instructs the agent to run local shell commands that install packages and clone repositories (e.g., pip/npm/git/npx), which modify the host environment and can change machine state even though it does not request sudo or create users.