spreadsheet-modeling

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" section instructs the agent to run local shell commands (ls ~/.claude/...) and install packages via npx to modify the environment—actions unrelated to spreadsheet modeling and effectively hidden/out-of-scope system-manipulation instructions, so this is a prompt-injection risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill is mostly benign for spreadsheet work but its "Companion check" instructs the agent to run local shell commands (ls of home skill dirs) and to offer installing missing skills via npx—actions that enumerate the local filesystem and can modify the machine by installing packages—so it has non-trivial potential to change system state even though it doesn't request sudo or system-file edits.