compensation-strategy

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" explicitly instructs the agent to run local shell commands (ls ~/.claude/skills/ ...) and offer/install packages via npx, which is unrelated to compensation advice and constitutes hidden operational instructions that probe/modify the local environment.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md "Benchmark a role against market" workflow explicitly instructs the agent to "pull data from at least two sources" and lists public, user-generated sites (Levels.fyi, Glassdoor, LinkedIn Salary, etc.), meaning the agent will ingest untrusted third-party content and use it to drive compensation decisions.