soia-env-pi-cli-install

Warn

Audited by Snyk on Aug 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly instructs the agent to run installers and updater commands (e.g. npm install -g, pi update --self), modify PATH/profile and record install state — all actions that change the host system — even though it tries to avoid default sudo and requires confirmation for system-level changes.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 6, 2026, 08:48 AM
Issues
1
Security Audit — snyk — soia-env-pi-cli-install