incident-response-incident-response

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill instructs agents to perform state-changing operational actions (mitigations, deployments, configuration and monitoring changes, scaling and rollbacks) that modify production systems and may require privileged access, even though it does not explicitly tell the agent to obtain sudo or bypass security mechanisms.