android-kotlin

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" tells the agent to run shell commands to enumerate local skill directories and offer installing missing skills (ls ~/.claude/skills/... and npx install), which is an instruction to access/modify the host environment unrelated to Android Kotlin development and thus a deceptive/out-of-scope directive.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill is mostly benign Android guidance but its "companion check" tells the agent to run shell commands (ls) and to offer installing missing skills via npx skills add, which instructs modifying the host by installing software, so it does push the agent to change machine state (though it does not request sudo or other high‑privilege actions).