motion-design

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The companion-check section instructs the agent to run shell commands (ls) and offer/install external skills (npx), which are system-level actions unrelated to motion-design and therefore constitute out-of-scope, potentially deceptive instructions (prompt injection).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The companion-check instructs the agent to run shell commands (ls) to inspect user skill directories and to offer installing missing skills via an npx command, which would execute external code and modify the environment—so it nudges the agent to perform filesystem access and installation actions that change machine state even though it doesn't request sudo or explicit privileged modifications.