ai-full-code-review

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill explicitly instructs the model to write review files directly into the user's local Obsidian vault and to delegate committing/pushing those files via an ai-commit helper, steering file-system and repo operations that could expose or move local data outside the immediate conversational context.