core-web-vitals

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The prompt includes an out-of-scope "Companion check" that explicitly instructs the agent to list local skill directories and offer installing packages via shell commands (ls and npx), which is unrelated to Core Web Vitals and attempts to access/modify the local environment—i.e., a hidden/extraneous instruction to perform potentially sensitive actions.