incident-responder

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly directs containment and recovery actions that change system state (process termination, account suspension, access revocation, system shutdown, network blocking, snapshots/memory dumps), which can require privileged operations and therefore present a risk of modifying the host machine.