vim-neovim

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" directs the agent on first activation to run local shell commands (ls ~/.claude/skills/ ...) and offer installing missing skills with npx, which is an explicit instruction to access the host filesystem and perform actions unrelated to Neovim configuration and thus falls outside the skill's stated purpose.