user-stories

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" explicitly instructs the agent to run local shell commands (ls ...) and offer to install packages (npx ...), which requires accessing and acting on the host environment — behavior outside the skill's stated user-story writing purpose and a potential exfiltration/execution vector.