agent

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly tells orchestrators to "pre-grant every permission the task needs" and to "pre-grant the permissions" in headless contexts, which encourages bypassing approval gates and enabling delegated agents to make privileged edits on the host.