jest-vitest

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" instructs the agent to run local filesystem commands and offer to install other skills (via npx), which are OS-level actions unrelated to the jest/vitest testing purpose and thus constitute hidden/deceptive instructions outside the skill's stated scope.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill is primarily documentation for testing, but its "companion check" explicitly instructs the agent to run local shell commands (ls) and suggests using npx to install skills, which reads local state and can modify the host by installing arbitrary code, so it poses a non-trivial risk of changing machine state.