fraud-detection

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.60). The prompt includes an explicit but out-of-scope, covert-feeling telemetry instruction to write execution metadata into ~/.claude/projects/ (with "skip silently if not found"), which causes persistent side-effects outside the stated analysis purpose and reads as a hidden logging/exfiltration behavior.