data-warehousing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The skill includes an explicit "Companion check" that instructs the agent to run local shell commands (ls ~/.claude/skills/... ) and offer installing missing skills via npx on first activation—actions that access the local environment and request installation outside the skill's stated data-warehousing purpose, so this is a prompt-injection style instruction.