crm-management

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The companion-check block (lines 312-316) instructs the agent to run local filesystem commands and suggest installing other skills—actions unrelated to CRM guidance and that request access to local environment, so they are hidden/deceptive behavior outside the skill's stated purpose.