email-marketing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The companion-check section instructs the agent to run local shell commands (ls on ~/.claude/skills etc.) and to install missing skills via npx, which is a system-level action outside the email-marketing skill’s stated purpose and effectively attempts to change the agent/environment behavior, so it is a hidden/out-of-scope instruction.