vim-neovim

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.60). The "Companion check" instructs the agent to run local shell commands and install packages (ls of ~/.claude/… and an npx install) which are operational actions outside the stated Neovim-helping scope and could access/modify the host environment, so it behaves like a hidden/extra instruction that risks exfiltration or unauthorized actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The bootstrap snippet in SKILL.md clones and adds an external Git repo at runtime using "https://github.com/folke/lazy.nvim.git", which fetches and then loads remote code into the runtime (git clone + prepend to runtimepath), so it directly causes execution of external code.