shell

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt exposes powerful host-level capabilities — running allowlisted commands on the host, creating/deleting/moving files, and changing modes/uid/gid — and explicitly warns host exec is not a security sandbox, so it can be used to alter or compromise the machine state unless constrained to a sandbox.