android-kotlin

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The skill includes an explicit "Companion check" that instructs the agent to run local shell commands (ls ~/.claude/skills/ ...) and offer installing other skills—actions unrelated to the Android Kotlin skill's stated purpose and that request local environment inspection/modification.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill instructs the agent to run local shell commands to enumerate installed skills and to offer installing missing companion skills via an npx command, which would modify the agent's environment/files and thus can change the machine state.