sonar-analyze

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly tells the agent to invoke the sonar-integrate skill which installs/updates sonarqube-cli, reconfigures the SonarQube MCP server and secrets-scanning hooks, and requires ensuring container runtimes are running — actions that modify the host environment and integration state.