prototype-hci-pack-beads

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The prompt explicitly instructs the agent to run bd init --stealth and “Use --stealth so Beads metadata is not committed to the main repo,” which directs the agent to conceal its traces (deceptive behavior) and is not required by the stated purpose of producing and recording HCI findings, so this is a hidden/deceptive instruction outside the skill’s advertised scope.