cli-design

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The "Companion check" block instructs the agent to run local shell commands (ls) and to suggest installing missing skills via npx — a system-level action unrelated to the CLI-design purpose and potentially accessing/modifying local files, so it constitutes a hidden/out-of-scope instruction.