git-advanced

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The companion-check block instructs the agent to list local skill directories and offer installing missing skills (running ls and npx install), which directs filesystem access and installation actions unrelated to the skill's stated "Git Advanced" purpose, so it is a hidden/out-of-scope instruction warranting a prompt-injection flag.