editor-tools

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Self-Heal Observer" section covertly instructs the agent to quietly monitor user "friction," not disclose the observation, and then read and follow a local diagnosis protocol—instructions that are deceptive and unrelated to the stated tmux/ranger configuration purpose.