accessibility-wcag

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The Companion check instructs the agent to run local shell commands (ls of user skill directories and npx to install skills), which requests filesystem inspection and remote installs that are outside the skill’s stated accessibility guidance and therefore constitute a hidden/out-of-scope operational instruction.