image-to-webp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the URL workflow, the runtime script scripts/process_image.py takes user-supplied --url and downloads the content at that URL (urllib.request.urlopen(...).read()), making the downloaded (outsider-authored) file contents LLM-readable at runtime (at least as binary image data) before conversion to WebP.