doca-structured-tools-contract

Warn

Audited by Snyk on Jul 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). This skill explicitly lists and instructs running privileged commands in its manual fallback chains (e.g. "flint -d q (sudo)" and "dmidecode ..."), which requires sudo and can access/affect sensitive machine state, so it pushes the agent toward privileged actions.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 18, 2026, 05:56 AM
Issues
1
Security Audit — snyk — doca-structured-tools-contract