yanzi-extension-dev

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The prompt instructs the agent to read a local agent token, call the local agent API to create/edit extensions (POST /v1/extensions) and to launch processes (e.g., Start-Process / dotnet run), which directly modify the host application's files and run code on the machine — it does not request sudo or create OS users but it clearly enables changing machine state.