selinux-knowledge-patch

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs loading and removing SELinux CIL modules (semodule -i / -r), generating and installing container policies (udica + semodule), and running containers with custom security labels—actions that modify kernel/SElinux policy and require elevated (sudo/root) privileges, so it does push the agent to change the machine state.