a2a-protocol

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The companion-check section instructs the agent to run local shell commands (ls and npx) to enumerate and install skills, which is outside the A2A protocol's stated purpose and could lead to local file exposure or command execution, so it is a hidden/deceptive instruction risk.