k8s-storage

Warn

Audited by Snyk on Jun 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.90). The prompt explicitly instructs stopping system services (systemctl stop k3s) and copying/modifying files under /var/lib/rancher (and handling the k3s token), which require root/sudo privileges and change the host/system state, so it pushes the agent toward privileged, state-modifying actions.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 28, 2026, 08:28 PM
Issues
1
Security Audit — snyk — k8s-storage