security-incident-response

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). Flagged because the skill explicitly directs actions that modify system state (delete/revert configs, remove accounts, audit/clear cron, systemd and SSH keys, change firewall rules/isolate hosts), which require elevated privileges and can alter the machine.