subagent-creator

Warn

Audited by Snyk on Mar 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly includes a "bypassPermissions" permissionMode ("Skip all permission prompts") and documents execute/write tools (Bash, Edit, Write) which enable state-modifying actions without safeguards, so it encourages bypassing security controls even though it doesn't directly instruct sudo or user-creation.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 27, 2026, 08:58 AM
Issues
1
Security Audit — snyk — subagent-creator