workflow-creator
Warn
Audited by Snyk on Feb 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly instructs the agent to create and save workflow files and to include/auto-run exact shell commands (e.g., deploys, DB migrations, installs), which can modify the host's state and automatically execute potentially destructive actions, though it does not request sudo or editing system-level config or user creation.
Audit Metadata