product-discovery

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" explicitly instructs the agent to run shell commands to enumerate local skill directories and offer installs—a system-level action unrelated to product discovery that could expose local environment details, so it is a hidden/deceptive instruction outside the skill's stated purpose.