api-testing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The skill includes a "Companion check" that explicitly instructs the agent to run local shell commands (ls) to inspect installed skills and to install packages via npx, which is outside the API-testing skill's stated purpose and could access/modify the local environment—this is a hidden/deceptive operational instruction and thus a prompt-injection risk.