opencode-runner

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The runner executes arbitrary OpenCode CLI prompts with "all permissions auto-approved" in headless mode and allows skipping or lacking the Agent Safehouse sandbox, enabling filesystem writes or other privileged actions that could modify the host even though it doesn't explicitly instruct sudo or user-creation.