skills-docx
Warn
Audited by Snyk on Mar 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly instructs installing system packages using sudo (e.g., "sudo apt-get install pandoc/libreoffice/poppler-utils"), which requires elevated privileges and modifies the host system state even though it doesn't request creating users or editing system configs.
Audit Metadata