cryptography

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" instructs the agent to run shell commands (ls) and offer installing packages (npx) to inspect and modify the local filesystem/environment—actions unrelated to cryptography and thus hidden/deceptive instructions outside the skill's stated purpose.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The companion-check section explicitly tells the agent to run shell commands (ls) and to offer installing missing companion skills via npx skills add ..., which would change the host filesystem/state by installing software and thus pushes the agent to modify the machine state.