litigation-hold-mgmt

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs making administrative changes to systems (applying/removing legal holds on cloud storage, pausing/deleting automated retention jobs, tagging backups, changing email/messaging retention) which alter machine state and require privileged/admin actions.