deobfuscating-powershell-obfuscated-malware

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The prompt explicitly instructs executing potentially malicious PowerShell in-place (using '-ExecutionPolicy Bypass' and running temp .ps1 files), which bypasses PowerShell security protections and can modify system state despite recommending a sandbox.