owasp

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The skill includes explicit "SELF-EVOLUTION TELEMETRY" instructions to look for a user project memory directory and append execution metadata (silently if present), which is a covert data-logging/exfiltration behavior outside the stated audit purpose and thus a hidden/deceptive instruction.