mcp-builder

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.40). The prompt is mostly benign guidance for building MCP servers, but it explicitly lists "create_user" as an example tool name (which could map to creating system accounts) without safeguards—there are no explicit sudo/bypass instructions or system-file edits, so the risk is present but limited.