seo-mastery

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" directs the agent to run shell commands (ls) and install packages (npx skills add), which are system-level instructions unrelated to SEO and attempt to change the agent's environment—i.e., deceptive/out-of-scope behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The companion check instructs the agent at runtime to offer installing missing companion skills using the command "npx skills add AbsolutelySkilled/AbsolutelySkilled --skill " (and references https://absolutelyskilled.dev/skill/...), which would fetch and run remote package code that can modify/extend agent behavior, so this is a runtime external dependency that can execute remote code.