data-pipelines

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The "Companion check" section explicitly instructs the agent to run local shell commands to enumerate and act on installed skills (ls and npx), which is an instruction to access and modify the host environment unrelated to the skill's advertised data-pipelines guidance and thus constitutes a deceptive/out-of-scope behavior risk.