react-native

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" instructs the agent to run local shell commands (ls ~/.claude/... etc.) and offer to install skills via npx, which is unrelated to React Native development and requests filesystem/installation actions outside the skill's stated purpose, so it is a hidden/deceptive instruction constituting a prompt injection.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md's "Companion check" explicitly tells the agent to check local skill folders and offer to install missing companions using commands like npx skills add ..., which would fetch and (potentially) load third‑party packages from external registries/GitHub and therefore exposes the agent to untrusted third‑party content that could indirectly inject instructions.