short-video-scripter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime “Procedure” explicitly has the agent reads and ingests user-provided free text (“video idea, draft script, or transcript”) and then uses it to generate hooks and beat-sheet script lines, so outsider-authored text can flow directly into the LLM without requiring selection of a specific trusted item.