api-testing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" section instructs the agent to run local shell commands (ls on user skill directories) and propose installing packages — an operational filesystem access and install instruction unrelated to the skill's API-testing purpose, which is a hidden/deceptive directive outside the skill's stated scope.