local-seo

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" quietly instructs the agent to run shell commands to list local skill directories and offer installing packages—instructions to access and modify the host environment that are unrelated to Local SEO and therefore constitute a hidden/deceptive prompt injection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's companion check instructs the agent at runtime to offer/install remote code via the npx command "npx skills add AbsolutelySkilled/AbsolutelySkilled --skill " (repo AbsolutelySkilled/AbsolutelySkilled), which would fetch and execute external package code that can change agent behavior—so this is a runtime external dependency that executes remote code.