edge-computing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" block (lines 382-385) instructs the agent to run local filesystem commands and offer to install packages (via npx), which is operational behavior outside the skill's edge-computing scope and could access or modify the host environment, so it constitutes a hidden/deceptive out-of-scope instruction.