cso

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The prompt embeds explicit, out-of-scope operational commands (git commits, git rm, running ~/.claude/... scripts, touching files, changing routing flags, migrating vendored code) that would modify the repo/environment despite the skill being a read-only security audit, so these are hidden/deceptive instructions outside the skill's stated purpose.