user-stories

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The "Companion check" instructs the agent to run shell commands to inspect local skill directories and to offer installing packages via npx, which is an out-of-scope, environment-access and install action unrelated to writing user stories and therefore a hidden/out-of-scope instruction.