cc-infra
Warn
Audited by Snyk on Apr 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (medium risk: 0.40). The skill instructs the agent to probe local services (read-only) but also recommends and can run commands that change machine state (pm2 start, npm install -g, pm2 start all) which would start/install services — it does not request sudo, edit system configs, or create users, so it is moderate risk.
Issues (1)
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata