ultimate-ui

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" sneaks in instructions to run shell commands (ls ~/.claude/skills/... and npx skills add ...) to inspect and modify the host environment — actions unrelated to UI design and effectively hidden/system-level directives outside the skill's stated purpose.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill's "companion check" explicitly tells the agent to run filesystem commands (ls) to inspect ~/.claude/skills/... and to offer installing missing companions via an npx install command, which causes the agent to read sensitive directories and potentially modify the machine by installing external code (even though it doesn't request sudo or editing system files directly).