technical-writing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" instructs the agent to run local shell commands and suggest installing packages (ls of user skill directories and npx install), which directs the agent to access and modify the user's environment—behavior outside the stated technical-writing purpose and a hidden/deceptive operational instruction.