video-analyzer

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The prompt includes an out-of-scope "Companion check" that explicitly instructs running filesystem commands (ls ~/.claude/skills/ ...) and installing packages (npx ...) which is unrelated to video analysis and effectively sneaks in system-access and installation instructions.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running privileged system-install commands (e.g., "sudo apt-get ... install -y ffmpeg"), which pushes the agent to obtain/use sudo and modify the machine's system state.