no-code-automation

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Companion check" instructs the agent to run local shell commands and install packages (ls ~/.claude/skills ... and npx skills add ...), which is an actionable instruction to access/modify the host environment that falls outside the no-code automation skill's stated purpose and therefore constitutes a hidden/deceptive prompt injection.