real-time-streaming

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.70). The skill includes an explicit "Companion check" that instructs the agent to run a local filesystem command (ls ~/... ) and recommend/install other skills — a meta-action to access local files and modify the agent environment that is outside the skill's stated streaming guidance and could be used to exfiltrate or change the agent setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The companion check instructs the agent to run filesystem commands and an npx install command that would modify the user's environment (install skills), so the skill pushes the agent to change machine state and potentially install code.