qa-plan

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.60). The skill instructs the agent to "Silently append" a session-state entry (write a file without user notification or approval), which is a hidden side-effect not disclosed in the main outputs and contradicts the "Never write the plan without asking" rule—this is a deceptive instruction outside the skill's stated, user-approved behavior.