krita

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The code intentionally installs and runs a persistent local HTTP server that executes arbitrary Python POSTed to 127.0.0.1:8737 with no authentication (CORS is the only gate), enabling remote code execution and easy local data-exfiltration/abuse.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source text flows from arbitrary POST body content to the Krita Bridge’s HTTP server (/run) and is executed via exec(compile(code, ...), ...) inside the live Krita session.