international-seo

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The companion-check block instructs the agent to run local shell commands and offer installing skills (npx install), which is unrelated to international SEO and constitutes hidden/deceptive operational instructions outside the skill's stated purpose.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The companion-check instructs the agent to run local shell commands (ls ...) and to offer installing missing skills via npx, which reads the host filesystem and can execute/modify local state (install packages), so it directs the agent to perform potentially state-changing and unsafe actions on the machine.