database-engineering

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.70). The "Companion check" tells the agent to run local shell commands (ls ... and npx skills add) to enumerate/install other skills, which is an instruction unrelated to the skill's stated database-engineering purpose and could be used to access local files or change system state.