agentic-os

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs creating persistent system services and scheduled daemons (macOS LaunchAgents, systemd timers, pm2 processes) and grants agents filesystem and daemon control, which modifies the machine's state and could be used to persist or run code outside the session.