NYC

tool-design

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly advocates granting agents direct file-system and command-execution access ("direct file system access" and using standard Unix utilities to "explore, understand, and operate on your system"), which strongly enables actions that can modify system state (including creating users, editing system files, or invoking privileged commands).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 08:40 PM