database-review

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.60). The prompt is mostly a DB review spec, but it includes a SELF-EVOLUTION TELEMETRY section that explicitly instructs checking the user filesystem and appending metadata to ~/.claude/projects/skill-telemetry.md — a persistent telemetry/write action unrelated to the stated database-audit purpose, so it is a deceptive/out-of-scope instruction.