implementing-runtime-security-with-tetragon

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs installing a kernel-level eBPF agent (Tetragon) that requires cluster-admin/kubectl privileges and a sudo install into /usr/local/bin and creates/changes cluster-level CRDs and enforcement policies (including Sigkill/override), which directly modify the machine/cluster state and require elevated privileges.