refactoring-patterns

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" block instructs the agent (on first activation) to run shell commands (ls and npx) to inspect and install companion skills—a hidden operational instruction outside the skill's stated refactoring purpose that could cause environment inspection or changes.