performance-engineering

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The "Companion check" block instructs the agent to run shell commands to enumerate local skill directories and to offer installing packages with npx — operational actions that are outside the Performance Engineering skill's stated diagnostic/optimization purpose and could access or modify the host environment, so this is a hidden/deceptive escalation of behavior.