chezmoi

Warn

Audited by Snyk on Jun 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs the agent to run an installer and to run chezmoi commands that modify user dotfiles (including ~/.ssh/config) and can execute repository-provided scripts during apply, which changes the machine's state and can alter sensitive configuration even though it doesn't request sudo or create users.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 27, 2026, 10:54 PM
Issues
1
Security Audit — snyk — chezmoi