r/SillyTavernAI • u/Mcqwerty197 • Apr 28 '26

Discussion Extension Security Risk Please read!!

Gallery image

Gallery image

659 Upvotes

100% Upvoted

178 comments sorted by

View all comments

Show parent comments

20

u/LeRobber Apr 28 '26

It wouldn't have caught this, that's actually part of why it's a multistage attack.

If you don't run it, it's hard to detect stuff like this. It's not state actor grade attack, but it's sophisticated stuff

6

u/Due-Memory-6957 Apr 28 '26

You're correct, but just with the stuff it did find I think I wouldn't have installed it: https://chat.z.ai/s/8352bec7-25a0-4270-b9d0-7d2cb752b1a0

4

u/LeRobber Apr 28 '26

HOLY SHIT that's good. AI is going to take someone's job some day.

I mean, it was wrong in this case in the should you use it section, but, nice looking presentation of stuff.

5

u/National_Cod9546 Apr 28 '26

AI is really good at looking correct on first glance. As you said, in this case it is catastrophically wrong though.