persist

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The script enables remote data exfiltration and arbitrary command execution by interpolating unescaped prompt contents into a shell command that calls external agent CLIs (e.g., claude/codex), creating a high-risk vector for RCE and leaking sensitive prompt data to third-party services.