Safety
An indirect prompt injection is enough to open a shell in Manus, via obfuscated JavaScript
Salt Labs tricked the Manus agent platform with instructions hidden in an email, bypassed its guardrails in JSFuck, and retrieved access tokens from connected third-party applications.