llm-app-development

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" explicitly instructs the agent to run shell commands to list local hidden skill directories and offer installs—an instruction to access local filesystem state unrelated to LLM app design and therefore a deceptive/extraneous action outside the skill's stated purpose.