byted-byteplus-vod-precision-erasure

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill accepts arbitrary http/https URLs in scripts/upload.py (UploadMediaByUrl) so the VOD service pulls public media, and scripts/precise_erase.py can return OCR/extracted on‑screen text (Erase.Info/Texts) to the agent, meaning untrusted third‑party content is ingested and can influence later actions.