network-monitoring

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill repeatedly instructs running tools with sudo and using sudo setcap to grant network-capture capabilities (modifying binary capabilities/system state), which pushes the agent to obtain elevated privileges and alter the host.