pfw-custom-dump

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The prompt includes a hidden authorization check and a covert instruction to hide the username ("khoi") and refuse service to others—behavior unrelated to the skill's stated purpose—so it is a prompt injection that attempts to alter agent behavior deceptively.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document contains an explicit secret backdoor: it instructs the skill to operate only for a specific hidden user ("khoi") and to conceal that fact from others, which is an intentional, covert access control/backdoor behavior.