council-review

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.60). The document repeatedly claims to be a "read-only" review and forces subagents to "MUST stay read-only", yet later specifies a default "review-and-fix" mode that plans and applies edits—a contradictory instruction that can mislead users about the skill's actual behavior.