link-based-auth

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill explicitly instructs embedding authentication tokens in URLs and handling them at the edge, which weakens security boundaries by encouraging token exposure (e.g., via URL/querystring, referer logs) though it does not present clear malicious intent.