Step 1: Prompt injection via issue title. Cline had deployed an AI-powered issue triage workflow using Anthropic's claude-code-action. The workflow was configured with allowed_non_write_users: "*", meaning any GitHub user could trigger it by opening an issue. The issue title was interpolated directly into Claude's prompt via ${{ github.event.issue.title }} without sanitisation.
2024年12月25日 星期三 新京报
Последние новости，推荐阅读PDF资料获取更多信息
Compensation: $80,000 — 85,000 (Full-time)
，更多细节参见PDF资料
事實上，若封鎖海峽，將進一步推高全球商品與服務成本，重創中國、印度、日本等全球最大經濟體——這些國家是經由此航道進口原油的主要買家。
In short: if you can swap in a different set of weights and use the exact same inference code for a different task, your setup is legitimate. If the inference code is inseparable from the algorithm, it's not.，详情可参考PDF资料