implementing-usb-device-control-policy

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). Flagged because the skill explicitly instructs modifying system state (GPO, registry, device installation restrictions, and EDR/Intune policies) which require administrative privileges and can alter or disable device functionality on the host or fleet.