codex-reference

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The prompt explicitly instructs agents how to escalate permissions, disable approval prompts, use workspace-write or danger-full-access sandboxes, and run shell/filesystem operations—encouraging actions that can modify or fully compromise the host system state.