provision-agent-workspace

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly directs the agent to "create or attach an isolated filesystem and shell" and provision sandboxes/VMs, which necessarily changes the host's state and can require privileged operations or resource provisioning, so it should be treated as a potentially state-compromising skill.