graphic-slide-deck

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt instructs the agent to read arbitrary local files, embed their verbatim contents, create directories and files, open files, and run deploy/export scripts (including triggering a Playwright install), all of which modify the host filesystem and can execute code — so it actively pushes the agent to change the machine state.