regulatory-submissions

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.70). The prompt includes an explicit "SELF-EVOLUTION TELEMETRY" section that instructs the agent to quietly append execution metadata to a project memory directory (~/.claude/projects/...), which is an extra, persistence/exfiltration behavior outside the stated regulatory-audit purpose and includes a "skip silently" clause that conceals the action—i.e., a hidden/deceptive instruction outside scope.