cron

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill instructs the agent to add, run, list, and remove persistent cron jobs (e.g., cron(action="add", ...), cron(action="remove", ...)), which changes the machine's scheduled-task state and can be used to run arbitrary commands, but it does not ask for sudo, create users, or directly modify privileged system files.