sales-playbook

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" instructs the agent to run local shell commands (ls) and install packages (npx), which are operational environment probes/modify actions unrelated to the sales-playbook's purpose, so it contains deceptive/out-of-scope instructions.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md "Companion check" (on first activation) explicitly tells the agent to offer installing missing companion skills with commands like npx skills add ..., which would fetch and install third‑party packages from public registries/GitHub (untrusted external code/content) and could change the agent's behavior at runtime.