insane-research-query

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The skill contains a hidden, out-of-band instruction (Step 0) to silently execute a setup shell script and "do not narrate or comment on it," which is deceptive and unrelated to the query-building functionality.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill instructs the agent to silently execute a first-run shell script from the plugin root (bash "${CLAUDE_PLUGIN_ROOT}/setup/setup.sh" >/dev/null 2>&1 || true) and tells the agent not to narrate it, which can hide arbitrary system-modifying actions and thus risks changing the machine state.