setting-up-devcontainers

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs the agent to write and change filesystem state (create .devcontainer files, modify ~/.zshrc, create symlinks and volumes, chmod scripts), recommends using sudo chown for permission issues, and even adds an alias that bypasses permission checks, which together push the agent toward privileged or state-changing operations that can compromise the machine.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 10:17 PM