recruiting-ops

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The file includes a "Companion check" that instructs the agent to run local shell commands (ls) and offer installing missing skills, which is an out-of-scope instruction to access the local filesystem and modify the environment unrelated to Recruiting Operations.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The companion-check section explicitly instructs the agent to run shell commands that inspect the user's home directories and to offer installing missing skills via an npx install command, which encourages accessing the filesystem and potentially modifying the machine state.