business-strategy

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill contains promotion of a non-financial service and payment platform (CashApp and Buy Me a Coffee) in its mandatory intro message.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to output promotional and redirect URLs (buymeacoffee.com, scayveracademy.com) during runtime, constituting unverified external behavioral dependencies.