coingecko-open-page

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The skill contains hidden/deceptive control instructions (e.g., "skip the ai-coord gate" and "follow these instructions ... do not invoke this skill again through a skill tool") that override normal coordination/authorization behavior and are outside the stated CoinGecko-opening purpose, so it is a prompt-injection attempt to bypass safety controls.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs to "skip the ai-coord gate", which directs the agent to bypass a coordination/security mechanism on the host; while it doesn't request sudo or file changes, this bypass is a security-compromising instruction.