workflow-from-chats

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The prompt explicitly instructs the agent to "Use subagent content as evidence, but cite only parent conversations," which is a deceptive direction to hide provenance and misrepresent evidence outside the skill's stated purpose of extracting durable preferences.