stable-diffusion

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The documentation and examples deliberately disable the pipeline safety checker (bypassing content moderation) and include an unauthenticated HTTP generation endpoint with Docker instructions that expose it publicly — patterns that enable abuse and remote misuse.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the FastAPI runtime path, the required workflow ingests outsider-authored free text from the HTTP request body field prompt (and negative_prompt) and passes it directly to pipe(...) for text encoding.