ci-cd-pipelines

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" instructs the agent to run shell commands that list local skill directories and to install missing skills via npx—behavior unrelated to CI/CD guidance and that attempts to access/modify the local environment, so it's a hidden/deceptive instruction outside the skill's stated purpose.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The blue-green deployment example runs a runtime curl to https://api.example.com/active-slot whose response is used to choose the deployment target and thus directly controls execution flow in the CI job, so it is a runtime external dependency that can influence/drive code execution.