task-scheduler

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to create, manage, and delete Windows Scheduled Tasks (including startup/logon tasks) which persistently modify the system state and can execute code—even though it includes mitigations, it still enables potentially dangerous changes to the host.