php-security

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt contains numerous recommendations to change system-wide PHP configuration (php.ini directives, disable_functions, open_basedir), write to system paths (e.g., /var/log, /var/uploads) and other admin-level settings that would modify the machine state and typically require privileged access, so it risks prompting an agent to perform privileged changes.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:47 PM