product-analytics

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.70). The "Companion check" section instructs the agent to run shell commands (ls) and offer installing missing skills via npx on first activation—an explicit action that accesses/affects the host environment and lies outside the product-analytics purpose, creating a hidden operational instruction and potential data/execution risk.