remotion-video-creation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Yes — rules/calculate-metadata.md includes an example that performs fetch(props.dataUrl) inside a calculateMetadata function and uses the fetched JSON to transform props/duration, which clearly ingests arbitrary remote (third‑party) content at runtime and can change subsequent tool behavior.