boilerplate-genie

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The skill explicitly instructs automatic ingestion and incorporation of Public, Confidential, and Personal knowledge—“prioritizing the most specific secrets”—and a “Rule Injection” that copies harvested rules from an external path, which goes beyond ordinary scaffolding and risks using or exposing secrets (a deceptive/hidden-behavior risk relative to the stated purpose).