switch

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The skill explicitly instructs the agent to treat externally loaded CLAUDE.md files as active system-level instructions that "override default behavior," which is an attempt to change the agent's system context and thus constitutes a prompt-injection risk outside the normal scope of a project-switcher.