remotion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime guidance (e.g., display-captions) fetches caption text from a captions JSON file at runtime (via fetch(staticFile(...)) and then uses response.text()/parsed caption token text fields), meaning outsider-authored caption text can be ingested if a user supplies/hosts that file.