api-design

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" block tells the agent to run local shell commands (ls of local skill directories) and offer installing packages — instructions that access the host filesystem and perform actions unrelated to the skill's API-design purpose, i.e., a hidden/out-of-scope instruction.