Step 1: Prompt injection via issue title. Cline had deployed an AI-powered issue triage workflow using Anthropic's claude-code-action. The workflow was configured with allowed_non_write_users: "*", meaning any GitHub user could trigger it by opening an issue. The issue title was interpolated directly into Claude's prompt via ${{ github.event.issue.title }} without sanitisation.
“心无百姓莫为‘官’”“不求‘官’有多大，但求无愧于民”“党中央制定的政策好不好，要看乡亲们是哭还是笑”……人民至上，始终是习近平总书记为政实践中最鲜明的底色。
write(chunk) { addChunk(chunk); },，详情可参考下载安装汽水音乐
Network errors when the user’s network fails. It’s not your fault if the user turns their Internet off or has a slow connection!
，更多细节参见体育直播
США и Израиль совершили ошибку, ожидая, что иранцы поддержат удары по своей стране и помогут в свержении режима. Главный просчет назвал профессор Университета Юго-Восточной Норвегии Гленн Дизен.
I've tested dozens of power stations - this one handled at everything I threw at it。关于这个话题，谷歌浏览器下载提供了深入分析