compromise-recovery

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill instructs executing high-privilege, state-changing actions (reset krbtgt, rotate federation/SAML secrets, reset privileged credentials, disable accounts, change Conditional Access, create PAWs), which require administrative privileges and directly modify critical system/tenant state.