ralph-status
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt explicitly instructs installing system packages using sudo (e.g., "sudo apt install sqlite3"), which asks the agent to perform privileged system changes and thus can modify the machine's state.
Audit Metadata