skill-plan

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The document proclaims the skill is read-only ("chỉ đọc, không sửa file nào") but then explicitly instructs the agent to auto-switch to skill-implement and proceed when the user asked for "full flow" and approved, which enables behavior outside the stated scope and thus is a hidden/contradictory instruction.