site-reliability

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The companion-check instructs the agent to run shell commands (ls) and to offer installing missing skills via npx skills add (which would install code on the host), so while it doesn't request sudo or create users it does push the agent to read and potentially modify the machine's filesystem and install arbitrary packages — a moderate risk.