tool-hooks-doctor

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt instructs the agent to write/overwrite project or global Claude settings (e.g., .claude/settings.json and ~/.claude/settings.json) and enable hooks that will execute arbitrary shell scripts, which modifies the user's configuration and can enable arbitrary code execution on the machine (though it does not request sudo or system-wide changes).