windows-infra-admin

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly directs privileged administrative actions (user creation, GPO and system/service role configuration, Azure AD Connect install, PowerShell automation) that modify system state and require elevated privileges, so it encourages changes that can compromise the host.