analytics-engineering

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The prompt includes a "Companion check" that explicitly directs the agent to run local shell commands (ls) and offer/install companion skills (npx), which is an operational instruction outside the analytics-engineering purpose and could access/modify the host environment.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill's "Companion check" tells the agent to run local filesystem commands (ls) and to offer installing missing companion skills via npx skills add, which prompts inspecting and potentially installing software on the host (i.e., modifying machine state), though it does not request sudo, system-file edits, or account creation.