system-design

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The file contains a "Companion check" that instructs the agent to run local shell commands (ls ~/.claude/skills/ ...) and to offer installing packages (npx skills add ...), which is unrelated to the skill's advertised system-design purpose and effectively asks the agent to access/modify the user's environment—a hidden/deceptive instruction outside scope.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The companion check explicitly instructs the agent to run shell commands (ls) to inspect host file paths and to offer/install missing skills via npx skills add, which directs the agent to modify the machine's user environment (install files), so it encourages changing the host state.