data-science

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The "Companion check" asks the agent on first activation to run a shell ls command to enumerate local skill directories and suggest installing missing skills (via npx), which requests local filesystem access and installation actions unrelated to the Data Science skill's stated purpose and thus constitutes an out-of-scope/deceptive instruction.