backend-engineering

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" directs the agent to run local shell commands to list user skill directories and offer installing missing skills (via npx), which is an out-of-scope, intrusive instruction unrelated to backend engineering and could read/modify the user's environment.