claims

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill defines and provides commands to grant powerful claims (write, execute, spawn, admin) and scope patterns that can enable agents to modify files, spawn processes, or obtain administrative-level actions, so it facilitates changing the machine state even though it doesn't explicitly instruct sudo or user creation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:28 AM