edr-xdr

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs installing and configuring EDR agents and taking automated/ manual response actions that change endpoint state (installing agents, isolating endpoints, killing processes, registry remediation, disabling accounts, reimaging), which would require elevated privileges and directly modify the machine state.