governing-sbx-fleets

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs administrators to deploy sign-in enforcement by writing platform-managed files (macOS MDM profiles, HKLM registry keys, root-owned files) and to run destructive admin-level commands (e.g., sbx policy reset, sbx reset) that stop daemons and delete local sandbox state, which require elevated privileges and modify the machine state.