agentic-os

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs creating persistent OS service/daemon configurations (macOS LaunchAgent plist, systemd service/timer, pm2 entries) and grants agents filesystem/git access within the project, which directs the agent to modify the host's runtime/service configuration and thus can change the machine's state and persistence.