modal-deploy

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The content includes explicit instructions to bypass a security scanner (git-clone workaround) and guidance that weakens security boundaries (an unauthenticated web terminal), which is suspicious steering without clear malicious intent.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime “WebSocket PTY terminal bridge” in templates/main.py ingests outsider-authored free text directly from WebSocket messages (user keystrokes) via websocket.receive() and forwards bytes to a live bash PTY.