pitchfork
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs modifying user shell startup files and system state (adding shell hooks, installing certs to the system trust store, and optionally running "sudo pitchfork boot enable" to register system-level services), which involves changing filesystem/init/system-wide settings and asking for sudo — so it pushes the agent toward privileged state changes.
Issues (1)
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata