product-strategy

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The companion-check section instructs the agent to run shell commands (ls) and offer to run an installer (npx) to enumerate and modify local skills — actions that access/alter the local environment and are unrelated to the product-strategy skill's stated purpose, so they are out-of-scope hidden/deceptive instructions.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The companion check explicitly tells the agent to run shell commands to enumerate local skill directories and to offer/install missing skills via an npx command, which involves reading the local filesystem and may install external code (modifying system state), so it should be flagged.