shell

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). This skill exposes an agent-facing shell and filesystem surface that allows arbitrary host command execution, background jobs, and streaming arbitrary file bytes with the host "jail" unset by default and host exec explicitly described as a non-sandboxed boundary — enabling remote code execution and data exfiltration if abused.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill exposes powerful host-targeted shell and filesystem operations (host exec is not a sandboxable isolation, host runs are unjailed by default, fs::write can modify files, and fs::chmod can change uid/gid), which enables changing system files/permissions and otherwise compromising the machine state.