event-driven-architecture

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" instructs the agent to run local shell commands and install packages (ls and npx) which requests execution/access outside the skill's Event-Driven Architecture scope and thus is a hidden/deceptive instruction to interact with the host environment.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The companion check explicitly tells the agent to run shell commands that list local skill directories and suggests installing missing skills with an npx install command, which instructs the agent to inspect and modify the host filesystem (install software), so it encourages changing the machine's state.