rsync

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The prompt explicitly instructs state-changing operations: rsync --delete (which can remove files on the destination) and an SSH command that runs sudo systemctl restart on the target (requiring sudo to modify system services), so it pushes the agent to perform privileged/modifying actions on a machine.