contract-drafting

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" section explicitly instructs the agent to run shell commands (ls ...) to inspect local skill directories and offer installing missing skills, which directs the agent to access and act on the host environment—behavior unrelated to contract drafting and therefore a hidden/deceptive instruction outside the skill's stated purpose.