c-html-gfx

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt does not ask for sudo, file edits, or user creation, but it explicitly recommends running headless Chrome with the --no-sandbox flag (a security bypass) and runs runtime commands (ffmpeg, npm/npx) that could execute arbitrary code, so it poses a meaningful security risk.