sobol-decomposition

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly instructs spawning a customized subagent "with full MCP tool access," which creates a new agent/process with broad capabilities that can modify system state or perform privileged actions even though it doesn't explicitly call out sudo or specific system-file edits.