chezmoi
Warn
Audited by Snyk on Jun 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs the agent to run an installer and to run chezmoi commands that modify user dotfiles (including ~/.ssh/config) and can execute repository-provided scripts during apply, which changes the machine's state and can alter sensitive configuration even though it doesn't request sudo or create users.
Issues (1)
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata