cpo-review

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The prompt contains a SELF-EVOLUTION TELEMETRY section that instructs the agent to probe and write into a user home path (~/.claude/projects/) to append telemetry—an action unrelated to a CPO product review and which could access or persist user data, so it is a hidden/out-of-scope instruction.