spreadsheet-modeling

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" instructs the agent to run shell commands to enumerate local skill directories and offer to install missing skills—system-level actions unrelated to spreadsheet modeling and effectively a hidden/exfiltration-capable instruction outside the skill's stated purpose.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The companion-check instructs the agent to run shell commands (ls) to inspect hidden skill directories and suggests using npx to install missing skills—actions that read and modify the host environment and therefore push the agent to change the machine's state.