pixel-art-sprites

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" secretly instructs the agent to run shell commands (ls) to inspect local skill directories and to install missing skills via npx, which is outside the pixel-art skill's stated purpose and attempts to access/modify the host environment.