observability

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" instructs the agent to run local shell commands (ls ... ) and install packages (npx skills add ...) to inspect/modify the host environment — actions unrelated to observability and potentially exfiltrate or change the system, so this is a hidden/deceptive instruction outside the skill's stated purpose.