codex

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs use of writable and "danger-full-access" sandboxes (permitting filesystem and network changes) and tells the agent to always use --skip-git-repo-check (bypassing safety checks), which enables modifying the machine state even if it defaults to read-only and sometimes asks for permission.