Modules must be array of strings, not 1 large str

"xss*, path_traversal, audit/sqli*" --> ['xss*', 'path_traversal', 'audit/sqli*']