agents-md-evals

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs the agent to move/rename project and user-level configuration and memory files (mv to /tmp, rename ~/.claude/CLAUDE.md, move memory dirs), run git checkout, and generally mutate filesystem state — actions that can break or compromise the host environment even though it doesn't request sudo or create users.