trace

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The prompt claims the skill "does not update any artefact — read-only" but later mandatorily instructs the agent to update .github/pipeline-state.json and merge guardrail entries, a contradictory/deceptive instruction that directs write actions outside the stated read-only scope.