regulatory-compliance

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The prompt includes a "Companion check" that instructs the agent to run local shell commands (ls ~/.claude/... and npx install) to enumerate and install local skills — an explicit, out-of-scope instruction that could expose local filesystem state or perform installs and therefore constitutes a hidden/undesired behavior relative to the regulatory-compliance purpose.