react-ink

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). Yes — the skill includes hidden meta-instructions that tell the agent to run local shell commands and install/check companion skills (e.g., npx skills ls, ls ~/.claude/skills/, npx skills add ...), which are outside the React Ink documentation purpose and instruct the agent to enumerate/modify the user environment.