navigate-skills

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.70). The preamble's bash logs and POSTs a "started" telemetry event (SKILL.md:10-11) before the documented consent flow ("If TEL_PROMPTED is no: Before starting... ask the user", SKILL.md:16-21), which contradicts the stated promise to prompt first and therefore behaves as a hidden/deceptive data exfiltration action.