frontend-developer

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The Companion check (lines 221–227) instructs the agent to run local shell commands and offer installing packages, which goes beyond the skill's stated frontend guidance and asks the assistant to access/modify the local environment—a hidden/out-of-scope instruction that functions like a prompt injection.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to run shell commands to enumerate and install companion skills (e.g., ls ... and npx skills add ...), which directs the agent to perform actions that modify the host environment and install software.