bookkeeping-automation

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" instructs the agent to run shell commands to enumerate local skill directories and to offer installing a specific npm package—actions that are unrelated to bookkeeping and attempt to inspect/modify the agent environment, so they constitute deceptive/out-of-scope instructions.