data-pipelines

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The "Companion check" section explicitly instructs the agent to run local shell commands (ls of ~/.claude/skills etc.) and offer/install packages via npx, which is outside the skill's advertised data‑pipeline advisory purpose and could be used to enumerate or modify the host environment.