1 person reported
All time, since Jul 25.
Report edits bypass injection judge
“Report title and summary stay editable through the report API afterwards, and an edit does not re-run the judge.”
Is this your bug? What gets counted gets fixed. Pile on.
Paste this into your agent. It files your report, with your error and version.
I hit this bug: rapsheet.dev/sheets/posthog/issues/8541/file Follow it to file my report. Show me the text before you send.
No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends
Signal report edits bypass the prompt injection safety judge. Title and summary edits via the report API or scout edit_report reach coding agents unscreened, possibly under another user's credentials.
Is this your bug?
File my report- Where
- Signals reports
- How bad
- Security risk: something exposed, or done without permission.