engineering-spec

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt explicitly instructs the agent to check the host filesystem and append telemetry to a file under the user's home directory (~/.claude/projects/.../skill-telemetry.md), which performs writes that modify the machine's state even though it doesn't require sudo.