load-testing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The companion-check section instructs the agent to run shell commands (ls) and install packages (npx) to enumerate and add skills — a system-level side effect unrelated to load-testing and therefore a hidden/deceptive instruction outside the skill's stated purpose.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill includes explicit filesystem commands (ls) in its companion check and a CI snippet that runs sudo to add apt sources and install packages (writing to /etc/apt/sources.list.d and running apt-get), which instructs modifying system files and performing privileged actions that can change the host state.