repeat-purchase-rate

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.60). The skill is mostly transparent and read-only, but it explicitly requests customer email (defaultEmailAddress.emailAddress) — unnecessary for the stated repeat-rate calculation and thus a hidden/exfiltration risk outside the skill's purpose (plus a model-targeted "Claude MUST emit" mandate), so this is a moderate prompt-injection concern.