workflow-creator

Warn

Audited by Snyk on Feb 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly instructs the agent to create and save workflow files and to include/auto-run exact shell commands (e.g., deploys, DB migrations, installs), which can modify the host's state and automatically execute potentially destructive actions, though it does not request sudo or editing system-level config or user creation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 12:15 AM