ralph-init

Warn

Audited by Snyk on May 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly tells the agent to retry failing system-service commands with "dangerouslyDisableSandbox: true" and writes a .claude settings file that broadens allowed shell/git actions, effectively encouraging bypass of sandbox/security boundaries even though it doesn't request sudo or create users.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 10, 2026, 08:49 PM
Issues
1