wireshark

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running tshark/tcpdump with sudo (and using sudo over SSH) to capture network traffic, which requires obtaining elevated privileges and thus pushes the agent to change the machine's state and potentially bypass normal protections.