containing-active-security-breach

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt directs the agent to perform privileged, state-changing actions (modifying firewall and DNS configs, shutting down VLANs, editing /etc/bind, capturing/writing memory, disabling AD accounts and resetting credentials, etc.) that require administrative/sudo access and would modify the machine/network state.