alterlab-genai-talking-head

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required Agentic Protocol and Workflow (e.g., "Search the web for current UGC Builder updates..." and "Research first: Search the web for current UGC Builder updates, Lipsync Studio capabilities...") instruct the agent to fetch and read open/public third‑party web content and use it to guide model/tool selection and generation decisions, exposing it to untrusted user-generated or public web content that could carry indirect prompt injections.