sdr-email-sms-playbook

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly instructs the agent to write a JSON "outcome sidecar" to ~/.claude/... (outside the repo) and even notes a PreToolUse hook that bypasses external-path protections, which directs the agent to modify persistent filesystem state and evade sandboxing — a potentially unsafe persistence/exfiltration vector.