sprites

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text at runtime when code running inside a sprite calls the local unauthenticated socket endpoints (e.g., GET /v1/services/.../logs and related streaming outputs) which can contain user-generated/untrusted content produced by attackers in the sprite context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The docs include an explicit runtime installation command that fetches and pipes remote shell code to the shell (curl -fsSL https://sprites.dev/install.sh | sh), which executes remote code and is presented as the required install path for the CLI.