expo-framework-rule

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The "Memory Protocol (MANDATORY)" section instructs the agent to run a local shell command (cat .claude/context/memory/learnings.md) and record memory, which are hidden/meta instructions that alter agent behavior and access local state outside the skill's stated Expo-guidelines purpose, so this is a prompt injection.