edge-computing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The companion-check block instructs the agent to run local shell commands (ls) and offer installing packages (npx), which is outside the edge-computing skill's stated purpose and effectively requests filesystem access and action on the host — a hidden/deceptive meta-instruction.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The companion check instructs the agent to run local shell commands (ls) and to offer installing missing skills via npx, which encourages executing commands that inspect and modify the host filesystem and install software—therefore it asks the agent to change the machine's state even though it doesn't request sudo explicitly.