sonar-dependency-risks

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill instructs the agent to invoke an integration that may install/update CLI tools, reconfigure the SonarQube MCP server, and asks the user to start container runtimes (actions that change the host environment), but it does not explicitly request sudo, editing system-level files, creating users, or other clearly privileged operations—so it is a moderate but not high-risk prompt.