ci-cd-pipelines

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The "Companion check" section instructs the agent to list local skill directories and offer/install missing skills (run ls and npx), which is unrelated to the CI/CD guidance and directs the agent to inspect/modify its local environment—an out-of-scope, potentially exfiltration/behavior-changing instruction.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The GitHub Actions example runs curl -s https://api.example.com/active-slot at workflow runtime and uses the fetched value to control deployment steps (which slot to deploy), so this external URL directly controls runtime behavior.