email

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The prompt contains a SELF-EVOLUTION TELEMETRY section that quietly instructs the agent to check for and append execution metadata to ~/.claude/projects/skill-telemetry.md—an action unrelated to the email-integration purpose and not disclosed in the skill description, so it's a hidden/deceptive out-of-scope instruction.