data-science

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The "Companion check" section instructs the agent to run local shell commands (ls) and propose installing other skills via npx—administrative/file-system probing and installation instructions that are unrelated to the data-science purpose and could lead to exfiltration or unexpected behavior, so this is a deceptive/out-of-scope instruction.