companify-assistente

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). Yes — the skill explicitly instructs the agent to run $companify-setup "nos bastidores" (silently) and to hide file/storage actions unless asked, which are hidden/deceptive instructions outside the stated conversational purpose.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly instructs the agent to run "$companify-setup" silently and create files ("nos bastidores sem pedir permissão ... para criar arquivo"), which causes the agent to modify the host machine's filesystem without user consent (though it does not request sudo or modify system-level config files).