qa-plan

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The prompt includes a hidden, unconditional "Silently append" instruction to write to production/session-state/active.md (create if missing), which is a deceptive side-effect that contradicts the stated "Never write the plan without asking" and is outside the user's expected scope.