detecting-rdp-brute-force-attacks

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the agent to "attempt exploitation" and perform "post‑exploitation" actions (document access level, lateral movement, persistent access), which encourage actively compromising and modifying target machines and therefore risk changing the machine's state.