automation

Warn

Audited by Snyk on Feb 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs the agent to create, modify, remove, enable/disable, and trigger cron jobs (i.e., persistent scheduled tasks that change the machine's behavior and can execute arbitrary commands), which modifies the host's state and could be used to persist or run harmful actions even though it doesn't explicitly request sudo or system-file edits.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 20, 2026, 08:51 PM