regex-mastery

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" instructs the agent to run shell commands (ls ~/.claude/skills/ ...) and offer installing packages—behavior unrelated to regex help and effectively a hidden system-level action outside the skill's stated purpose, so it is a prompt-injection.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.30). The companion-check step instructs the agent to execute shell commands (ls) and to offer installing missing skills via an npx install command, which encourages filesystem inspection and software installation (state-modifying) though it does not request sudo, user creation, or modification of privileged system files.