remotion-video-creation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's guidance explicitly includes runtime fetching of arbitrary remote resources (e.g., calculate-metadata shows fetch(props.dataUrl) to set composition props/duration, assets.md and many media rules allow remote URLs and mediabunny UrlSource, and lottie.md fetches third‑party JSON) which causes the agent to ingest untrusted, public content that can directly influence rendering decisions and subsequent tool behavior.