hyperframes-overview-edit

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). Contains an unauthenticated HTTP POST /save endpoint that parses client-supplied patches and writes them into topic files, combined with permissive CORS and a server bound to all interfaces—this enables unauthorized remote modification of files if exposed.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). required runtime path는 browser-side Edit 버튼으로 생성된 patch(사용자 free text/붙여넣기 포함 가능)를 fetch('/save', ...)로 서버에 POST한 뒤, serve-live.py가 do_POST→parse_patch→apply_change_to_html로 인입 텍스트를 읽어 index.html/overview.html에 반영함.