team

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill orchestrates tmux panes and writes/removes project-local state (e.g., .omx/state, git commits, tmux kill-pane, rm -rf) which modifies the machine state but does not request sudo or system-level changes — however it explicitly documents auto-accept bypass behavior and a --dangerously-skip-permissions worker flag that could bypass runtime permission prompts, so it poses a limited-but-not-negligible risk.