competitive-analysis

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" block instructs the agent to run local shell commands (ls ~/.claude/skills/ ... ) and offer installing missing skills (npx skills add ...), which are actionable instructions to access the filesystem and install code that are outside the Competitive Analysis skill's stated purpose and therefore constitute a hidden/deceptive prompt injection risk.