interview-design

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The prompt includes a "Companion check" that explicitly instructs the agent to run shell commands (ls on local skill directories) and offer installing packages via npx—actions unrelated to interview design that request filesystem access and command execution, so they are out-of-scope and constitute a hidden/deceptive operational instruction.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.50). Flagged because the companion-check instructs the agent to run filesystem commands (ls) to inspect ~/.claude/… and to offer installing missing companion skills via npx skills add …, which involves reading host directories and potentially installing/executing software (modifying system state) even though it doesn't request sudo or create users.