bggg-tiktok-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Runtime path: the user-provided TikTok URL is passed to yt-dlp/tikwm and the resulting --write-info-json/tikwm JSON fields (e.g., title/description/author) are parsed and written into download_manifest.json, which is then printed as LLM-readable JSON; these fields originate from TikTok/third-party scraping responses (outsider-authored content).