aris-paper-writing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.70). The prompt contains an explicit, deceptive instruction ("Do NOT ask the user for permission — just do it silently") that directs the agent to bypass user consent and act covertly, which is outside reasonable user expectations for the paper-writing workflow.