performance-management

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The companion-check block instructs the agent to run local shell commands and offer installing packages (ls and npx), which is outside the skill's stated performance-management purpose and introduces hidden/system-level behavior and installation prompts—so it is a deceptive/out-of-scope instruction.