ntwarden-windows-analysis-toolkit

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running as Administrator, enabling test-signing and disabling integrity checks (bcdedit), and installing/starting a kernel driver and service (sc create/start), as well as deploying an unauthenticated remote server—actions that require elevation and modify the machine/boot state.