react-ink

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The prompt contains hidden/deceptive instructions outside its React Ink scope—notably conditional checks that tell the agent to run local commands (e.g., ls ~/.claude/skills, npx skills ls --json) and to detect/install companion skills—which instruct the agent to access the user's filesystem and modify installed software unrelated to building terminal UIs.