streak

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves a Telegram bot (streak-bot.py) that processes incoming messages and check-ins from Telegram chats, allowing an external user to inject free text into the challenge logs.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill prompt suggests using sudo systemctl start docker as an error handling fallback for Docker, which involves obtaining sudo privileges and modifying system services.