windows-hello

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). This skill directs administrative, privileged changes to device and directory state (e.g., deploying Entra Kerberos server objects, modifying Intune/CA policies, disabling convenience PIN, configuring PIN reset and AD/DC certs), which would modify the machine/environment and require elevated privileges if executed by the agent.