monorepo-management

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" section explicitly instructs the agent to run local shell commands (ls on user skill directories) and offer installing packages via npx—actions unrelated to monorepo guidance that probe the local environment and attempt to modify it, which is a hidden/deceptive behavior outside the skill's stated purpose.