setting-up-devcontainers
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs the agent to write and change filesystem state (create .devcontainer files, modify ~/.zshrc, create symlinks and volumes, chmod scripts), recommends using sudo chown for permission issues, and even adds an alias that bypasses permission checks, which together push the agent toward privileged or state-changing operations that can compromise the machine.
Audit Metadata