vim-neovim

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" directs the agent on first activation to run local shell commands (ls ~/.claude/skills/ ...) and offer installing missing skills with npx, which is an explicit instruction to access the host filesystem and perform actions unrelated to Neovim configuration and thus falls outside the skill's stated purpose.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The init.lua bootstrap code runs a git clone of https://github.com/folke/lazy.nvim.git at runtime to fetch and load the lazy.nvim plugin (adding it to runtimepath), so remote code is fetched, executed by Neovim, and is a required dependency for the skill.