laohan-gengxin

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill intentionally runs installation/updating commands and service restarts (e.g., brew/npm/pip installs, npx -g, running maintenance scripts, launchctl kickstart) which modify the machine state after user confirmation, but it does not request sudo or instruct bypassing security mechanisms or creating system users, so the risk is present but limited.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)