baoyu-image-gen

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/main.ts, the runtime reads outsider-supplied free text directly from the CLI argument --prompt, --promptfiles (by readPromptFromFiles), or non-TTY stdin (readPromptFromStdin), then passes that text into providerModule.generateImage(prompt, ...) for image generation.