scheduled-tasks

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). It directs the agent to create/list/delete cron jobs that run arbitrary commands on the host (modifying system state and enabling persistent or scheduled execution), which is a high-risk action even if it may not explicitly request sudo.